wolfBoot/config/examples/sim-fips.config

28 lines
920 B
Plaintext

# wolfBoot simulator build using the wolfCrypt FIPS 140-3 module.
# Point WOLFBOOT_LIB_WOLFSSL at an unpacked FIPS (or FIPS-ready) wolfSSL tree.
# Prototype target for the CM4 FIPS integration (see docs/FIPS.md).
ARCH=sim
TARGET=sim
SIGN?=ECC384
HASH?=SHA384
FIPS?=1
WOLFBOOT_LIB_WOLFSSL?=../wolfssl-5.9.2-gplv3-fips-ready
WOLFBOOT_SMALL_STACK?=0
SPI_FLASH=0
# ARCH=sim skips tools/config.mk's SPMATH?=1 default, so set it here: without it
# the build falls to USE_FAST_MATH, which defines WC_NO_HARDEN and disables the
# side-channel hardening a FIPS build must keep. Also required by the FIPS
# guard in options.mk.
SPMATH=1
DEBUG=1
# sizes should be multiple of system page size
WOLFBOOT_PARTITION_SIZE=0x40000
WOLFBOOT_SECTOR_SIZE=0x1000
WOLFBOOT_PARTITION_BOOT_ADDRESS=0x80000
WOLFBOOT_PARTITION_UPDATE_ADDRESS=0x100000
WOLFBOOT_PARTITION_SWAP_ADDRESS=0x180000
# required for keytools
WOLFBOOT_FIXED_PARTITIONS=1