<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Question about asymmetric encryption DFU</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/10541/question-about-asymmetric-encryption-dfu</link><description>We have created a firmware and encrypted it with a private key and made it public. When we download it to the chip it&amp;#39;s decrypted with a public key stored in the chip. Right? What adnventages does it offer vs. standart symmetric encryption?</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Mon, 30 Nov 2015 12:27:20 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/10541/question-about-asymmetric-encryption-dfu" /><item><title>RE: Question about asymmetric encryption DFU</title><link>https://devzone.nordicsemi.com/thread/39215?ContentTypeID=1</link><pubDate>Mon, 30 Nov 2015 12:27:20 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:be264a9f-6e90-462f-8a0d-620a0ab1fba8</guid><dc:creator>Vidar Berg</dc:creator><description>&lt;p&gt;DFU signing ensures that an image is received from a trusted source, but doesn&amp;#39;t encrypt it as Wojtek mentioned. The advantage with asymmetric over symmetric signing is that it&amp;#39;s safer because  only the public key will be stored on the nRF device, while the drawback is increased complexity.&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item><item><title>RE: Question about asymmetric encryption DFU</title><link>https://devzone.nordicsemi.com/thread/39214?ContentTypeID=1</link><pubDate>Sun, 29 Nov 2015 23:25:33 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:0a78bd9e-9296-43b7-ab3b-9bbd96051668</guid><dc:creator>Wojtek</dc:creator><description>&lt;p&gt;If you are using signing tools from newest SDK, it doesn&amp;#39;t encrypt your firmware! If I understand correctly, there is only a checksum (sha-256) of the firmware, that is signed (by your private key) and verified on the chip (by verification - public key). there is no encryption there. So if you are worrying about decompilation of firmware, that is not the solution. It only protects your chip from unauthorized DFU updates (which may brick your device or something)&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>