NCS encrypted MCUboot images supported?

RE: NCS encrypted MCUboot images supported?

Hung Bui — Thu, 25 Mar 2021 08:47:08 GMT

Hi Denis,
I see. I thought you were asking for using your own signing key.
Regarding image encryption, you can find the documentation here.

I'm not too familiar with the topic but could you try follow this instruction from Simon in this case ?
I will try to get Simon to look into the case if you have any problem following his guide.

RE: NCS encrypted MCUboot images supported?

denis — Thu, 25 Mar 2021 02:45:45 GMT

I’m aware of the signing. I’d also like to encrypt the image. Using a separate key.

RE: NCS encrypted MCUboot images supported?

Hung Bui — Wed, 24 Mar 2021 13:55:55 GMT

Hi Denis,

There is a clarification here. Image signing is not encrypting image. What it does is to hash the image and then use the signature to sign the hash. You can read about that here.

You can also use imgtool to generate your own key file, documentation here.

There are a few of related Devzone case that can be useful :
https://devzone.nordicsemi.com/f/nordic-q-a/72365/best-process-for-signing-firmware-images-when-using-mcuboot

devzone.nordicsemi.com/.../signing-zephyr-images---west-sign