Official encrypted secure DFU

RE: Official encrypted secure DFU

tejaChintalapati — Thu, 25 Feb 2021 14:55:43 GMT

Great! Thanks for the help.

RE: Official encrypted secure DFU

Einar Thorsrud — Thu, 25 Feb 2021 14:54:54 GMT

Hi,

Yes, that is supported by MCUboot which is the bootloader used in nRF Connect SDK. See Encrypted images.

RE: Official encrypted secure DFU

tejaChintalapati — Thu, 25 Feb 2021 14:37:44 GMT

Okay. Does 5340 support Encrypted updates?

RE: Official encrypted secure DFU

Einar Thorsrud — Thu, 25 Feb 2021 14:34:11 GMT

Hi,

There are no updates at this point. The nRF5 SDK still only supports signed but not encrypted upgrade images.

RE: Official encrypted secure DFU

tejaChintalapati — Thu, 25 Feb 2021 14:31:43 GMT

Would love to see this supported. Any further update on this?

RE: Official encrypted secure DFU

Einar Thorsrud — Tue, 21 Apr 2020 19:34:17 GMT

Hi Dirk,

I understand, but unfortunately, there is no support for encrypted DFU images in the nRF5 SDK. I have updated an internal feature request about this, but you should not expect to see it in the near future.

Einar

RE: Official encrypted secure DFU

dzabel — Tue, 21 Apr 2020 07:49:52 GMT

Hi Einar,

I would like to second nevi's request here. The thread mentioned above as well as other threads regarding the same problem contain unanswered questions and/or dead infocenter links; I think they are simply too old. I have tried to find I an encryption solution before I was aware of the existing discussion and am still not sure how to use the protocol buffer compiler; (what is the role of nano-pb, compared to the google protoc, and if I try just to regenerate the dfu_cc_bp2.py file in the pc-nrfutil source tree, I get something which is different from the existing file (most probably due to version difference of the protoc program).

Regards

Dirk

RE: Official encrypted secure DFU

Einar Thorsrud — Thu, 16 Apr 2020 10:04:57 GMT

Hi Nevi,

There is no support for encrypted secure DFU in the SDK. I believe the thread you linked to is the best and most complete description of how it can be done. But of course, you can choose to do it differently.

Einar