fix(secure_boot): Fix SB verification failure when sig block and key digest mismatch

Browse Source

- Secure boot V2 verification failed when multiple keys are used to sign the bootloader
  and the application is signed with a key other than the first key that is used to
  sign the bootloader.
- The issue was introduced as a regression from the commit `ff16ce43`.
- Added a QEMU test for recreating the issue.
- Made SECURE_BOOT_FLASH_BOOTLOADER_DEFAULT independent of SECURE_BOOT_BUILD_SIGNED_BINARIES.

...

This commit is contained in:

harshal.patil

2025-02-27 16:18:47 +05:30

parent afb2154247

commit a6ea9bcd41

12 changed files with 211 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

tools/test_apps/security/secure_boot/test/esp32c3_efuses.bin

BIN

Binary file not shown.