Official encrypted secure DFU

[nevi]

Hi,

I would like a solution for encrypted OTA firmware update and I just realized that the Secure DFU doesn't enrypt the firmware image just sign it.

I find this Q&A:

https://devzone.nordicsemi.com/f/nordic-q-a/37260/adding-encryption-to-secure-dfu-sdk-v15

But it seems very complicated.

I want to ask if there is a more "official" method for this (with SDK16).

I think this is a very common scenario, so it would be nice if I shouldn't hack nrfutil and the bootloader.

Thanks,

nevi

[dzabel]

Hi Einar,

I would like to second nevi's request here. The thread mentioned above as well as other threads regarding the same problem contain unanswered questions and/or dead infocenter links; I think they are simply too old. I have tried to find I an encryption solution before I was aware of the existing discussion  and am still not sure how to use the protocol buffer compiler; (what is the role of nano-pb, compared to the google protoc, and if I try just to regenerate the dfu_cc_bp2.py file in the pc-nrfutil source tree, I get something which is different from the existing file (most probably due to version difference of the protoc program).

Regards

  Dirk

[Einar Thorsrud]

Hi Dirk,

I understand, but unfortunately, there is no support for encrypted DFU images in the nRF5 SDK. I have updated an internal feature request about this, but you should not expect to see it in the near future.

Einar

[tejaChintalapati]

Would love to see this supported. Any further update on this?

[Einar Thorsrud]

Hi,

There are no updates at this point. The nRF5 SDK still only supports signed but not encrypted upgrade images.

[tejaChintalapati]

Okay. Does 5340 support Encrypted updates?

[Einar Thorsrud]

Hi,

Yes, that is supported by MCUboot which is the bootloader used in nRF Connect SDK. See Encrypted images.