NRF52840 PDK BLE Secure DFU Bootloader

RE: NRF52840 PDK BLE Secure DFU Bootloader

Archana Fugare — Mon, 20 May 2019 05:59:43 GMT

Please help me, my lib will not generated when I am using arm-gcc for rxternl micro ecc folder

Thanks

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Fri, 17 Nov 2017 10:52:05 GMT

I fixed the problem. I was building the micro-ecc lib with the make file in(external\micro-ecc\nrf52_iar\armgcc) using arm-gcc. Now i built micro-ecc lib with iar and every thing works.

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Fri, 17 Nov 2017 09:06:41 GMT

Hi Hung,

I started all over again and i still have the same problem Which compiler did you use ? i used GCC and it works but does not work with IAR!

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Thu, 16 Nov 2017 15:09:02 GMT

Yes, and I use IAR. Your bootloader works i will start all over again.

RE: NRF52840 PDK BLE Secure DFU Bootloader

Hung Bui — Thu, 16 Nov 2017 15:07:55 GMT

Here is the one without debug:

nrf52840_xxaa_s140.hex

Have you made sure you use softdevice S140 v5.0.0-2 alpha ? Which compiler did you use ?

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Thu, 16 Nov 2017 14:44:23 GMT

Hi Hung, I tested your bootloader and it works. I didn't modified anything in bootloader and yes i replaced the public key. Can you use my .zip and public key with pca10056 bootloader not debug version? becuase my problem is in version validation and debug version skip this step as i said before uECC verify() return 0 which means the signature is not valid.

RE: NRF52840 PDK BLE Secure DFU Bootloader

Hung Bui — Thu, 16 Nov 2017 14:36:44 GMT

Hi Nahro,

I attached here the bootloader I generated and it worked fine with the .zip file you provided. I used NRFToolbox on Android to update. I used the pca10056_debug in SDK v14.1 to generate the bootloader.

Have you made sure you didn't modified the bootloader and you copied and replaced the public key with the key you generated?

bootloader_nrf52840_xxaa_s140.hex

Could you please try using this bootloader and test on your side ? Note that you can use RTT Viewer to see the log on the bootloader side.

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Wed, 15 Nov 2017 13:45:58 GMT

I am still debugging the bootloader, so uECC verify() return 0 which means the signature is not valid! I use nrfutil version 3.3.2 to generate the key file and nrfutil keys display --key pk --format code private.key to get the public key.

RE: NRF52840 PDK BLE Secure DFU Bootloader

Hung Bui — Wed, 15 Nov 2017 12:44:01 GMT

This telling that the hash the bootloader compute with the public key didn't match with hash in the initdata.

Have you tried to follow my step by step guide correctly ? You may want to send us your : bootloader, the .zip file, your application, publickey , private key, so we can check here.

You can use a simple SDK example as your application.

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Wed, 15 Nov 2017 12:42:50 GMT

I think its a bug in the SDK because it verfiy the signature but return internal error! so i commented return NRF_DFU_RES_CODE_INVALID_OBJECT; and every thing works.

err_code = nrf_crypto_ecdsa_verify_hash(sig_info_p256, &crypto_key_pk, &init_packet_hash, &crypto_sig); if (err_code != NRF_SUCCESS) { NRF_LOG_ERROR("Signature failed"); //return NRF_DFU_RES_CODE_INVALID_OBJECT; }

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Wed, 15 Nov 2017 11:34:23 GMT

Hi Hung, I debugged the bootloader and it failed in nrf_crypto_ecdsa_verify_hash() function which return 11

RE: NRF52840 PDK BLE Secure DFU Bootloader

Hung Bui — Tue, 14 Nov 2017 09:58:23 GMT

Hi Nahro,

Could you check and send us:

The log on the phone (you can swipe right on the phone to see the log when in nrfConnect, or install nRFLog app)
The log on the bootloader, you need to enable either RTT or UART log
The sniffer trace of the DFU process if you have a sniffer

RE: NRF52840 PDK BLE Secure DFU Bootloader

nahro — Mon, 13 Nov 2017 10:34:27 GMT

Hi Hung, Yes i did, and i overwrite dfu public_key.c in the project with the public key that i got from the key file that i used for creating firmware package.

RE: NRF52840 PDK BLE Secure DFU Bootloader

Hung Bui — Mon, 13 Nov 2017 10:02:46 GMT

Hi Nahro,

It's not clear how you build the bootloader, have you generated your private and public keys and update the bootloader project with your own public key ?

Please follow my guide here.