nRF52840 IAP (In-Application Programming). Is it possible?

RE: nRF52840 IAP (In-Application Programming). Is it possible?

Marjeris Romero — Thu, 16 Sep 2021 15:18:47 GMT

Hi,

There is no offical support for encrypted secure DFU in the SDK.
But you might find this post by a 3rd party user helpful: https://devzone.nordicsemi.com/f/nordic-q-a/37260/adding-encryption-to-secure-dfu-sdk-v15

RE: nRF52840 IAP (In-Application Programming). Is it possible?

peter_100P — Mon, 13 Sep 2021 20:13:51 GMT

I'm afraid that's a non-starter. All traffic to and from a SPI flash is trivial to intercept and mount a MIM attack.

RE: nRF52840 IAP (In-Application Programming). Is it possible?

Marjeris Romero — Mon, 26 Apr 2021 15:11:54 GMT

Hi,

There is an SPI DFU master example at the end of this DFU tutorial: https://devzone.nordicsemi.com/nordic/short-range-guides/b/software-development-kit/posts/getting-started-with-nordics-secure-dfu-bootloader

Perhaps updating through SPI will satisfy your requirements?

Regarding the public key, if you take a look at the public_key.c file (or dfu_puclick_key.c) you can find a pk[64] array. It's hardcoded in the file but can easily be change to be read from a place in flash instead of a const.

Best regards,

Marjeris