<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>nRF54L15 firmware encryption</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/127883/nrf54l15-firmware-encryption</link><description>Enable the &amp;quot;mcuboot_with_encryption&amp;quot; function. 1: When using VSCode for flashing, by default, mcuboot is flashed with un-signed and un-encrypted firmware, while the application firmware is flashed with signed firmware. Can signed and encrypted firmware</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Thu, 23 Apr 2026 12:16:47 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/127883/nrf54l15-firmware-encryption" /><item><title>RE: nRF54L15 firmware encryption</title><link>https://devzone.nordicsemi.com/thread/565398?ContentTypeID=1</link><pubDate>Thu, 23 Apr 2026 12:16:47 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:1286bbc3-6c9b-4cc9-ae3b-d5eb67e326ac</guid><dc:creator>Nishant Gaurav</dc:creator><description>&lt;p&gt;Hi, fredly&lt;/p&gt;
&lt;p&gt;&lt;span&gt;When you build with encryption enabled, the build system generates both&amp;nbsp;&lt;/span&gt;&lt;code class="m_b183c0a2 mantine-Code-root" dir="ltr"&gt;zephyr.signed.bin&lt;/code&gt;&lt;span&gt;&amp;nbsp;(unencrypted, signed) and&amp;nbsp;&lt;/span&gt;&lt;code class="m_b183c0a2 mantine-Code-root" dir="ltr"&gt;zephyr.signed.encrypted.bin&lt;/code&gt;&lt;span&gt;&amp;nbsp;(signed and encrypted) in the application build directory.&amp;nbsp;&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;To enable encryption, you build with:&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;&amp;nbsp;west build -b nrf54l15dk/nrf54l15/cpuapp -- -DSB_CONFIG_BOOTLOADER_MCUBOOT=y -DSB_CONFIG_BOOT_ENCRYPTION=y&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;The&amp;nbsp;&lt;strong&gt;MCUboot bootloader image itself is not encrypted&lt;/strong&gt;&amp;nbsp;&amp;mdash; it is the&amp;nbsp;&lt;em&gt;application&lt;/em&gt;&amp;nbsp;image that gets encrypted. MCUboot is the entity that&amp;nbsp;&lt;em&gt;performs&lt;/em&gt;&amp;nbsp;decryption of the application image during the slot-swap process.&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;&lt;/span&gt;&lt;/p&gt;
&lt;p&gt;&lt;span&gt;&lt;/span&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>