fix(esp_security): Set WR_DIS_SECURE_BOOT_SHA384_EN by default when

Flash Encryption Release mode is enabled and Secure Boot P384 scheme not is enabled.
2025-10-26 15:27:52 +05:30
parent 7b57a1cd16
commit 6ea63548d4
2 changed files with 2 additions and 2 deletions
@@ -967,7 +967,7 @@ menu "Security features"

        config SECURE_BOOT_SKIP_WRITE_PROTECTION_SCA
            bool "Skip write-protection of SECURE_FLASH_PSEUDO_ROUND_FUNC_STRENGTH"
-            default y if SECURE_FLASH_PSEUDO_ROUND_FUNC
+            default y if SECURE_FLASH_PSEUDO_ROUND_FUNC && !SECURE_FLASH_ENCRYPTION_MODE_RELEASE
            default n
            depends on SOC_ECDSA_SUPPORT_CURVE_P384 && SOC_FLASH_ENCRYPTION_XTS_AES_SUPPORT_PSEUDO_ROUND
            help