Encrypted image update with serial recovery

[fouad1233]

Hi am trying to update the encrypted image with mcu bootloader. My bootloader prj.conf file is as following:

CONFIG_PM=n

CONFIG_MAIN_STACK_SIZE=2048
CONFIG_MBEDTLS_CFG_FILE="mcuboot-mbedtls-cfg.h"


### mbedTLS has its own heap
# CONFIG_HEAP_MEM_POOL_SIZE is not set

### We never want Zephyr's copy of tinycrypt.  If tinycrypt is needed,
### MCUboot has its own copy in tree.
# CONFIG_TINYCRYPT is not set
# CONFIG_TINYCRYPT_ECC_DSA is not set
# CONFIG_TINYCRYPT_SHA256 is not set

CONFIG_FLASH=y

### Various Zephyr boards enable features that we don't want.
# CONFIG_BT is not set
# CONFIG_BT_CTLR is not set
# CONFIG_I2C is not set

CONFIG_LOG=y
CONFIG_LOG_MODE_MINIMAL=y # former CONFIG_MODE_MINIMAL
### Ensure Zephyr logging changes don't use more resources
CONFIG_LOG_DEFAULT_LEVEL=0
### Use info log level by default
CONFIG_MCUBOOT_LOG_LEVEL_INF=y
### Decrease footprint by ~4 KB in comparison to CBPRINTF_COMPLETE=y
CONFIG_CBPRINTF_NANO=y
### Use the minimal C library to reduce flash usage
CONFIG_MINIMAL_LIBC=y


#Disable Zephyr console
CONFIG_UART_CONSOLE=n
CONFIG_CONSOLE=n

#MCU Boot serial recovery
CONFIG_MCUBOOT_SERIAL=y
CONFIG_BOOT_SERIAL_UART=y

# Delay for serial recovery
CONFIG_BOOT_SERIAL_DETECT_DELAY=1000

#Indication
CONFIG_MCUBOOT_INDICATION_LED=y


CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y
CONFIG_BOOT_ECDSA_TINYCRYPT=y

CONFIG_BOOT_ENCRYPT_IMAGE=y


#CONFIG_MCUBOOT_SERIAL_DIRECT_IMAGE_UPLOAD=y

CONFIG_BOOT_SIGNATURE_KEY_FILE="mykey-ecdsa-p256.pem"
CONFIG_BOOT_ENCRYPTION_KEY_FILE="mykey-ecdsa-p256.pem"

When I send the zephyr.signed.encrypted.bin of my user application with mcumgr the user application not work but when I send the signed one it works successfully. I think there is a missing settings in my prj.conf file so the image ended by mcumgr is not decrypted before it is written to the flash. Please help me!! Thanks