• State Verified Answer
  • Replies 6 replies
  • Subscribers 62 subscribers
  • Views 2325 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 120673
Options
This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

DFU with password

Jackxl

Hi all. I have phone with nrf Tollbox and central device with DFU, SD130 2.0.0, SDK11. I would like flash application to central by OTA when I enter password in nrfToolbox. My central device doesn't have keyboard or display. Is it possible ? How ? I used DFU from this tutorial devzone.nordicsemi.com/.../ I have tried modify this DFU with passkey (static passkey), but with no result.

Parents
  • 0

    I assume you are updating your central by switch it to peripheral mode and your phone as central to do DFU.

    To add a password, you need to implement it on your own. Says the DFU target will reject DFU init packet if there is no "password" command is written on the DFU Control point characteristic. If you want to avoid attacker to sniff your connection and catch that fixed password, you can implement a scheme when the DFU target send to the DFU master a random number, and the DFU master have to encrypt it using the secret key (that hardcorded in the bootloader) and send the result back. The DFU target will check, if it match then it will allows the DFU process to be started.

    Of course you would need to modify the DFU app on the phone. All the source code are available, so I don't think there would be any problem.

Reply
  • 0

    I assume you are updating your central by switch it to peripheral mode and your phone as central to do DFU.

    To add a password, you need to implement it on your own. Says the DFU target will reject DFU init packet if there is no "password" command is written on the DFU Control point characteristic. If you want to avoid attacker to sniff your connection and catch that fixed password, you can implement a scheme when the DFU target send to the DFU master a random number, and the DFU master have to encrypt it using the secret key (that hardcorded in the bootloader) and send the result back. The DFU target will check, if it match then it will allows the DFU process to be started.

    Of course you would need to modify the DFU app on the phone. All the source code are available, so I don't think there would be any problem.

Children
Related