DFU upload and signing key with SDK11?

RE: DFU upload and signing key with SDK11?

bjorn-spockeli — Tue, 30 Aug 2016 06:51:21 GMT

Good idea, there will be major changes and improvements compared to the current bootloader. The release is scheduled in the first half of September, subject to change of course.

RE: DFU upload and signing key with SDK11?

syntroniks — Fri, 26 Aug 2016 15:13:36 GMT

Looking forward to this new SDK -- I was just porting my nrf51 hmac bootloader but I will hold off expectantly :>

RE: DFU upload and signing key with SDK11?

bjorn-spockeli — Tue, 09 Aug 2016 13:10:47 GMT

Yes, it must be flashed separatley. The nrf_sec module is placed above the bootloader, starting at 0x3DC00 and the bootloader should then start at 0x39C00.

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Tue, 09 Aug 2016 12:42:30 GMT

Does the nrf_sec module need to be flashed separately? it will not override the bootloader?

RE: DFU upload and signing key with SDK11?

bjorn-spockeli — Mon, 08 Aug 2016 06:40:35 GMT

Have you flashed the nrf_sec module as well? DFU with signing was removed from SDK v11 as the ECC library used in SDK v10 did not meet our timing requirements, i.e. it took to long to verify a firmware image. However, we're introducing a new bootloader library in the next SDK release, which includes DFU with signing.

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Fri, 05 Aug 2016 11:58:39 GMT

SDK 10. My last attempt was to modify the private key in SDK10, compile and then upload a package signed with that key. Why was this "removed" from SDK11? (actually, it still exists under components\libraries\bootloader_dfu\experimental)

RE: DFU upload and signing key with SDK11?

bjorn-spockeli — Fri, 05 Aug 2016 07:55:55 GMT

@shayo : Are you using SDK v11 or v10? DFU with Signing was experimental in SDK v10, but has been removed in SDK v11.

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Sat, 30 Jul 2016 04:36:10 GMT

Final attempts before I go to sleep - still no luck. I can't find any combination of compiling the experimental bootloader with the private key such that it is able to load my signed package. I now get an error saying "REMOTE DFU OPERATION FAILED".

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Sat, 30 Jul 2016 03:41:14 GMT

OK. I've made some progress. the GATT CONNECTION TIMEOUT only appears when I sign the package with a key. If I just make the zip file without a key - it uploads without any problem (even when connection parameters are 30). As soon as I add the key, I get that error. Is it possible the "regular" bootloader can't cope with packages that are key signed?

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Sat, 30 Jul 2016 03:20:16 GMT

Went back to SDK10 to see where the problem originates. I still get the same problem with SD 130 v1.0.0. I tried the recommendation given here (devzone.nordicsemi.com/.../) about changing the connection parameters. Recompiled the bootloader with uVision, but I still get the same error - GATT CONNECTION TIMEOUT. I also tried reducing the number of packets in nrftoolbox from 10 to 1 - same problem.

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Sat, 30 Jul 2016 00:25:46 GMT

After going back to nrfutil 0.5.1, I still can't upload the zip file. now I get the following error messages: GATT CONNECTION TIMEOUT

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Sat, 30 Jul 2016 00:22:18 GMT

OK. more progress. nrfutil 1.3.2 will only work with the newer (unreleased) SDK12. downgrading to 0.5 and using the following commands do generate the proper fields in the json file:

nrfutil keys --gen-key mykey05.pem nrfutil.exe keys --show-vk=code mykey05.pem

nrfutil dfu genpkg --application nrf51422_xxac_s130.hex --key-file mykey05.pem package_old.zip

RE: DFU upload and signing key with SDK11?

Shay Ohayon — Fri, 29 Jul 2016 23:06:21 GMT

OK. looking into the generated zip file gave some clue. it completely missing all the signing information fields in the json file (no "init_packet_data" section at all). Any ideas why ?!?!?

I'm using nrfutil version 1.3.2.