Sample code for Tinycrypt AES encryption

RE: Sample code for Tinycrypt AES encryption

Raoul — Thu, 27 Jul 2023 22:46:23 GMT

[quote user="snowuyl"]

I encounter another warning message as follows.

WARNING: Using default MCUBoot key, it should not be used for production.

[/quote]

Hi,

If I'm not mistaken, you've also created another ticket for this issue. I think you'll get an answer there. But the answer is what it says in the warning (and in the documentation) - the default MCUboot key should be replaced when you go into production, otherwise every NCS user in the world will know your key.

Best regards,

Raoul

RE: Sample code for Tinycrypt AES encryption

snowuyl — Wed, 26 Jul 2023 11:40:07 GMT

devzone.nordicsemi.com/.../WARNING_5F00_Using_5F00_default_5F00_MCUBoot_5F00_key.txt

RE: Sample code for Tinycrypt AES encryption

snowuyl — Wed, 26 Jul 2023 11:37:27 GMT

devzone.nordicsemi.com/.../1057.hello_2D00_world.zip

RE: Sample code for Tinycrypt AES encryption

snowuyl — Wed, 26 Jul 2023 11:37:08 GMT

I encounter another warning message as follows.

WARNING: Using default MCUBoot key, it should not be used for production.

Procedures to reproduce this issue are as follows.

1. Unzipping hello-world.zip to D:\ncs\v2.3.0\bootloader\mcuboot\samples\zephyr\ folder.

2. cd D:\ncs\v2.3.0\bootloader\mcuboot\samples\zephyr\

3. west build -b nrf5340dk_nrf5340_cpuapp

RE: Sample code for Tinycrypt AES encryption

Raoul — Sun, 23 Jul 2023 22:08:09 GMT

Hi Snowuyl,

I haven't had time to look more closely at this, sorry. We are very busy in the summer weeks since we have fewer staff than usual.

If you still have this issue, I'll try to take a look at it soon.

Best regards,

Raoul

RE: Sample code for Tinycrypt AES encryption

snowuyl — Wed, 19 Jul 2023 01:30:17 GMT

devzone.nordicsemi.com/.../6746.warning_5F00_BOOT_5F00_ECDSA_5F00_TINYCRYPT_5F00_was_5F00_selected.txt

RE: Sample code for Tinycrypt AES encryption

snowuyl — Wed, 19 Jul 2023 01:29:00 GMT

devzone.nordicsemi.com/.../6330.mcuboot.conf

RE: Sample code for Tinycrypt AES encryption

snowuyl — Wed, 19 Jul 2023 01:26:32 GMT

Thanks for your reply! I have added the following configuration in D:\ncs\v2.3.0\bootloader\mcuboot\samples\zephyr\hello-world\child_image\mcuboot.conf file.

CONFIG_BOOT_ECDSA_TINYCRYPT=y

But west build shows the following warning messages.

warning: The choice symbol BOOT_ECDSA_TINYCRYPT (defined at
D:/ncs/v2.3.0/bootloader/mcuboot/boot/zephyr/Kconfig:98) was selected (set =y), but no symbol ended
up as the choice selection. See
docs.zephyrproject.org/.../kconfig.html and/or look up
BOOT_ECDSA_TINYCRYPT in the menuconfig/guiconfig interface. The Application Development Primer,
Setting Configuration Values, and Kconfig - Tips and Best Practices sections of the manual might be
helpful too.

RE: Sample code for Tinycrypt AES encryption

Raoul — Tue, 18 Jul 2023 13:45:13 GMT

Hi,

You usually configure mcuboot by creating "child_image/mcuboot.conf" in your application folder. My colleague describes it well here: How to configure the bootloader.

Alternatively you can assign custom project configurations for the bootloader with

-Dmcuboot_CONF_FILE=<filename>.conf

as described here: Using custom project configurations

Could you try doing this? Remember to undo your previous CMake change, in that case.

Best regards,

Raoul

RE: Sample code for Tinycrypt AES encryption

snowuyl — Tue, 18 Jul 2023 01:35:20 GMT

devzone.nordicsemi.com/.../no_5F00_log_5F00_messages_5F00_related_5F00_to_5F00_Tinycrypt.txt

RE: Sample code for Tinycrypt AES encryption

snowuyl — Tue, 18 Jul 2023 01:32:00 GMT

devzone.nordicsemi.com/.../6011.CMakeLists.txt

RE: Sample code for Tinycrypt AES encryption

snowuyl — Tue, 18 Jul 2023 01:31:45 GMT

Thanks for your reply! I have added the following setting in D:\ncs\v2.3.0\bootloader\mcuboot\boot\zephyr\CMakeLists.txt. But west build and west flash doesn't show any log messages related to Tinycrypt. How can I make sure Tinycrypt is built with MCUboot?

set(CONFIG_BOOT_ECDSA_TINYCRYPT y)

RE: Sample code for Tinycrypt AES encryption

Raoul — Mon, 17 Jul 2023 13:53:55 GMT

Hi,

According to this release note, TinyCrypt has been included in the mcuboot code base, you should be able to enable it via Kconfig.

I was unable to find reference documentation, but I see mention of the CONFIG_BOOT_USE_TINYCRYPT option here: https://github.com/nrfconnect/sdk-mcuboot/blob/823fd369c1430b50d263ccd6fbcf98bdd44001ba/boot/zephyr/Kconfig#L28

I also see that there is CONFIG_BOOT_ECDSA_TINYCRYPT, discussed in this case: Bulid MCUBoot with TINYCRYPT to support DFU image cipher/encryption

Would you mind trying these?

I'm sorry I can't dig deeper into this at the moment, we are quite busy during the summer weeks.

Best regards,

Raoul

RE: Sample code for Tinycrypt AES encryption

snowuyl — Fri, 14 Jul 2023 01:35:29 GMT

Thanks for your reply! I would like to build MCUboot with TinyCrypt. Could you kindly to provide reference documentation?

RE: Sample code for Tinycrypt AES encryption

Raoul — Thu, 13 Jul 2023 14:48:46 GMT

Hi Snowuyl,

As far as I know we don't have a sample for this, sorry. I do see that there is some test code available for it, which might be useful: https://github.com/zephyrproject-rtos/zephyr/blob/main/tests/crypto/tinycrypt/src/sha256.c

And of course the documentation: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/zephyr/services/crypto/tinycrypt.html

If Tinycrypt is not a necessity, then we do have other AES Crypto samples: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/samples/crypto.html

Best regards,

Raoul