DFU: Require bond to write to Buttonless DFU Service, but allow unbonded updates in bootloader

RE: DFU: Require bond to write to Buttonless DFU Service, but allow unbonded updates in bootloader

mrono — Mon, 19 Nov 2018 09:52:06 GMT

Thank you again.

I don't really want to make major modifications to the bootloader. I was just wondering if there was a way to get the functionality I want without any modifications to SDK sources.

Ideally I would like to have the security offered by the bond sharing combined with the "backup mode" of non-bonded DFU if the bootloader was activated by a button press. Perhaps this use case is something Nordic could consider for a future SDK version?

RE: DFU: Require bond to write to Buttonless DFU Service, but allow unbonded updates in bootloader

bjorn-spockeli — Mon, 19 Nov 2018 09:17:36 GMT

Yes, defining NRF_DFU_BLE_BUTTONLESS_SUPPORTS_BONDS will result in ble_dfu_bonded.c being used. However, this .c file calls a couple ASVCI (Asynchronous Supervisor interface ) functions that are only compiled into the bootloader when the _REQUIRES_BONDS define is set. Hence, you will need to modify the bootloader to perform unirected advertising instead of directed advertisement with the shared bond information if you want to go this route.

RE: DFU: Require bond to write to Buttonless DFU Service, but allow unbonded updates in bootloader

mrono — Mon, 19 Nov 2018 07:37:21 GMT

Thank you.

Bond sharing would be nice, but not strictly required in my case. So I guess editing ble_dfu_unbonded is the way to go. Or actually I'll make a private copy of it.

Just to confirm my original question: If I would define NRF_DFU_BLE_BUTTONLESS_SUPPORTS_BONDS, then ble_dfu_bonded.c would be used. Security parameters would then be set correctly without modifications. Would this work with a bootloader that doesn't require bonds?

RE: DFU: Require bond to write to Buttonless DFU Service, but allow unbonded updates in bootloader

bjorn-spockeli — Fri, 16 Nov 2018 15:45:51 GMT

Hi Markuu,

If you want only bonded devices to be able to write to the DFU Service characteristics, but still allow unbonded devices to perform DFU once the device is in bootlaoder mode, then the easiest solution is as you suggested, modify the .cccd_write_access and .write_access to SEC_JUST_WORKS

dd_char_params.cccd_write_access = SEC_JUST_WORKS;
add_char_params.write_access = SEC_JUST_WORKS;
add_char_params.read_access = SEC_OPEN;

parameters in ble_dfu_buttonless_char_add in ble_dfu_unbonded.c

This is one of the things that is done when defining NRF_DFU_BLE_BUTTONLESS_SUPPORTS_BONDS = 1 ( using ble_dfu_bonded.c and not _unbonded.c). However, if you would like to have the bond sharing feature, some more modifications are needed on the bootloader side.

Best regards

Bjørn