Enable Encryption

RE: Enable Encryption

Hung Bui — Thu, 01 Oct 2020 11:14:03 GMT

You can read more about the cryptocell cc310 here: https://infocenter.nordicsemi.com/topic/ps_nrf52840/cryptocell.html?cp=4_0_0_5_5

But it's basically a hardware cryptography peripheral that can be utilized to encrypt your data, it can be faster and more efficient compare to using software cryptography library.
It wouldn't help you to encrypt the actual firmware of your application.

To protect your firmware you can use the APPROTECT to block the debug/programmer access, and use the ACL if you want to block access internally from different parts of the flash memory.

RE: Enable Encryption

Muqarrab — Thu, 01 Oct 2020 07:49:35 GMT

Thanks, Hung Bui

I am asking about the "Arm CryptoCell CC310 cryptographic security module" in the nRF52840 document. What is this? Can you please explain what is this and how can I achieve this?

RE: Enable Encryption

Hung Bui — Wed, 30 Sep 2020 12:13:01 GMT

Hi Muqarrab,

Please describe what exactly you meant by "Secure firmware" or "Secure my firmware". What kind of protection you want to your firmware ?
Regarding encrypting data communication, the ble_app_template uses peer manager library so most of the security procedures are handled by the library.
When you configure the characteristic with BLE_GAP_CONN_SEC_MODE_SET_ENC_NO_MITM(), the central/client will receive a Insufficient Authorization when it tries to read/write to the characteristic. After that the default behavior is that the central will initiate the pairing/bonding process. And the link will be encrypted after that.
You don't need to trigger pairing from the server/peripheral side.

RE: Enable Encryption

Muqarrab — Wed, 30 Sep 2020 09:34:35 GMT

Yes, I want both.
1- Secure Firmware
2-encrypt data communications

RE: Enable Encryption

awneil — Wed, 30 Sep 2020 09:32:09 GMT

[quote userid="67200" url="~/f/nordic-q-a/66532/enable-encryption"]My main purpose is to secure my firmware[/quote]

"securing" firmware is usually a different topic from encrypting your data communications

Could you clarify what you mean by that?