samples: bluetooth: fast_pair: locator_tag: HW crypto MCUboot for nRF54L

kapi-no · kapi-no · commit 66a9fffe4ed2 · 2025-03-24T15:26:11.000+01:00
Updated configurations for the nRF54L build targets in the Fast Pair
Locator Tag sample to use HW crypto in the MCUboot bootloader.

This change breaks the backwards compatibility as it changes the
MCUboot signature type from RSA to ED22519.

Ref: NCSDK-30842

Signed-off-by: Kamil Piszczek &lt;Kamil.Piszczek@nordicsemi.no&gt;
diff --git a/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l05_cpuapp/boot_signature_key_file_ed25519.pem b/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l05_cpuapp/boot_signature_key_file_ed25519.pem
@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIEcuFYDHAHi5JE6PC8QVuREnCsrjJbX7L4EEnhLbsWbi
+-----END PRIVATE KEY-----
diff --git a/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l05_cpuapp/sysbuild_release.conf b/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l05_cpuapp/sysbuild_release.conf
@@ -6,4 +6,7 @@
 
 SB_CONFIG_BOOTLOADER_MCUBOOT=y
 SB_CONFIG_MCUBOOT_MODE_DIRECT_XIP=y
-SB_CONFIG_BOOT_SIGNATURE_TYPE_RSA=y
+SB_CONFIG_BOOT_SIGNATURE_TYPE_ED25519=y
+SB_CONFIG_BOOT_SIGNATURE_TYPE_PURE=y
+SB_CONFIG_MCUBOOT_SIGNATURE_USING_KMU=y
+SB_CONFIG_BOOT_SIGNATURE_KEY_FILE="\${SB_APPLICATION_CONFIG_DIR}/boot_signature_key_file_ed25519.pem"
diff --git a/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l10_cpuapp/boot_signature_key_file_ed25519.pem b/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l10_cpuapp/boot_signature_key_file_ed25519.pem
@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIIOCRnU1f9KZzfITcihTytZaJgTP1XU/NCbVpElBm5m5
+-----END PRIVATE KEY-----
diff --git a/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l10_cpuapp/sysbuild.conf b/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l10_cpuapp/sysbuild.conf
@@ -6,4 +6,7 @@
 
 SB_CONFIG_BOOTLOADER_MCUBOOT=y
 SB_CONFIG_MCUBOOT_MODE_DIRECT_XIP=y
-SB_CONFIG_BOOT_SIGNATURE_TYPE_RSA=y
+SB_CONFIG_BOOT_SIGNATURE_TYPE_ED25519=y
+SB_CONFIG_BOOT_SIGNATURE_TYPE_PURE=y
+SB_CONFIG_MCUBOOT_SIGNATURE_USING_KMU=y
+SB_CONFIG_BOOT_SIGNATURE_KEY_FILE="\${SB_APPLICATION_CONFIG_DIR}/boot_signature_key_file_ed25519.pem"
diff --git a/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l15_cpuapp/boot_signature_key_file_ed25519.pem b/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l15_cpuapp/boot_signature_key_file_ed25519.pem
@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIFjCntMdjT+ZREsWd4lxtVeCPBca2/+lGTXrU/CwgOhQ
+-----END PRIVATE KEY-----
diff --git a/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l15_cpuapp/sysbuild.conf b/samples/bluetooth/fast_pair/locator_tag/sysbuild/configuration/nrf54l15dk_nrf54l15_cpuapp/sysbuild.conf
@@ -1,9 +1,12 @@
 #
-# Copyright (c) 2024 Nordic Semiconductor
+# Copyright (c) 2024-2025 Nordic Semiconductor
 #
 # SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
 #
 
 SB_CONFIG_BOOTLOADER_MCUBOOT=y
 SB_CONFIG_MCUBOOT_MODE_DIRECT_XIP=y
-SB_CONFIG_BOOT_SIGNATURE_TYPE_RSA=y
+SB_CONFIG_BOOT_SIGNATURE_TYPE_ED25519=y
+SB_CONFIG_BOOT_SIGNATURE_TYPE_PURE=y
+SB_CONFIG_MCUBOOT_SIGNATURE_USING_KMU=y
+SB_CONFIG_BOOT_SIGNATURE_KEY_FILE="\${SB_APPLICATION_CONFIG_DIR}/boot_signature_key_file_ed25519.pem"

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+-----BEGIN PRIVATE KEY-----`
	`2`	`+MC4CAQAwBQYDK2VwBCIEIEcuFYDHAHi5JE6PC8QVuREnCsrjJbX7L4EEnhLbsWbi`
	`3`	`+-----END PRIVATE KEY-----`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+-----BEGIN PRIVATE KEY-----`
	`2`	`+MC4CAQAwBQYDK2VwBCIEIIOCRnU1f9KZzfITcihTytZaJgTP1XU/NCbVpElBm5m5`
	`3`	`+-----END PRIVATE KEY-----`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+-----BEGIN PRIVATE KEY-----`
	`2`	`+MC4CAQAwBQYDK2VwBCIEIFjCntMdjT+ZREsWd4lxtVeCPBca2/+lGTXrU/CwgOhQ`
	`3`	`+-----END PRIVATE KEY-----`
Original file line number	Diff line number	Diff line change
`@@ -1,9 +1,12 @@`
`1`	`1`	`#`
`2`		`-# Copyright (c) 2024 Nordic Semiconductor`
	`2`	`+# Copyright (c) 2024-2025 Nordic Semiconductor`
`3`	`3`	`#`
`4`	`4`	`# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause`
`5`	`5`	`#`
`6`	`6`
`7`	`7`	`SB_CONFIG_BOOTLOADER_MCUBOOT=y`
`8`	`8`	`SB_CONFIG_MCUBOOT_MODE_DIRECT_XIP=y`
`9`		`-SB_CONFIG_BOOT_SIGNATURE_TYPE_RSA=y`
	`9`	`+SB_CONFIG_BOOT_SIGNATURE_TYPE_ED25519=y`
	`10`	`+SB_CONFIG_BOOT_SIGNATURE_TYPE_PURE=y`
	`11`	`+SB_CONFIG_MCUBOOT_SIGNATURE_USING_KMU=y`
	`12`	`+SB_CONFIG_BOOT_SIGNATURE_KEY_FILE="\${SB_APPLICATION_CONFIG_DIR}/boot_signature_key_file_ed25519.pem"`