<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>How to get a Signature-less Bootloader from example Bootloaders</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/60537/how-to-get-a-signature-less-bootloader-from-example-bootloaders</link><description>Hi 
 I would like to know what the easiest way to get a signature-less bootloader from your DFU bootloader examples. For me it looks as if the open_bootloader is not very different to the secure_bootloader and it&amp;#39;s not really open since it also uses encryption</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Thu, 23 Apr 2020 14:17:57 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/60537/how-to-get-a-signature-less-bootloader-from-example-bootloaders" /><item><title>RE: How to get a Signature-less Bootloader from example Bootloaders</title><link>https://devzone.nordicsemi.com/thread/246298?ContentTypeID=1</link><pubDate>Thu, 23 Apr 2020 14:17:57 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:09f5bbd0-78e5-464e-b6ab-db3b07ebb6e3</guid><dc:creator>Einar Thorsrud</dc:creator><description>&lt;p&gt;Hi,&lt;/p&gt;
&lt;p&gt;The SDK does not provide any bootloader without support for signature verification. However, the Open bootloader only uses signature verification for bootloader updates, and not for application or SoftDevice updates.&amp;nbsp;This is controlled by the&amp;nbsp;NRF_DFU_REQUIRE_SIGNED_APP_UPDATE macro, which is used&amp;nbsp;by&amp;nbsp;signature_required() in&amp;nbsp;components\libraries\bootloader\dfu\nrf_dfu_validation.c. You could simply modify&amp;nbsp;signature_required() to always return false. With this modification, no crypto libraries are actually used, but we do not have any ready-made projects where they do not exist. You would have to remove unused code yourself (or live with it being there unused).&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>