Adding MCUBoot with encrypted images

RE: Adding MCUBoot with encrypted images

poipoicarlos — Thu, 01 Sep 2022 19:27:47 GMT

I was able to make this one work however maybe this is slightly different to what you want to implement. In my mcuboot.conf I added the following

CONFIG_SINGLE_APPLICATION_SLOT=y

CONFIG_BOOT_SERIAL_ENCRYPT_EC256=y

CONFIG_BOOT_SIGNATURE_TYPE_ECDSA_P256=y

then I signed and encrypted the app_to_sign.bin using the imgtool. During the DFU, the entire image gets written to the flash first then gets decrypted after. Finally, the decrypted image gets written back to flash.

RE: Adding MCUBoot with encrypted images

Sigurd Hellesvik — Wed, 22 Jun 2022 13:51:09 GMT

Ah of course, there the docs are.

But yea, when I look back at the answers I got from our developers last month when I handled this case, I am not able to tell you anything about our timeline for encrypted images.

Please contact your regional sales manager for this. I think they will be able to give you better answers.

Regards,
Sigurd Hellesvik

RE: Adding MCUBoot with encrypted images

KRich — Wed, 22 Jun 2022 12:57:49 GMT

Actually, I found the information in the nRF SDK documentation stack: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/mcuboot/encrypted_images.html but it is also there in the MCUBoot documentation directly https://docs.mcuboot.com/encrypted_images.html.

I understand about the timeline questions and the sales team. Feel free to let me know if I need to go that route. Thanks!!!

RE: Adding MCUBoot with encrypted images

Sigurd Hellesvik — Wed, 22 Jun 2022 08:31:34 GMT

Before I ask our developers about this, could you link to the MCUBoot support you mention?
I skimmed through https://docs.mcuboot.com/design.html but were unable to find it.
I ask cause it would be useful for me to have something to reference when I ask our developers about a timeline.

Disclaimer: Timeline questions are usually directed to our Sales team. I might end up asking you to "Please ask your Regional Sales Manager for information about our timeline." in the end.

Regards,
Sigurd Hellesvik

RE: Adding MCUBoot with encrypted images

KRich — Tue, 21 Jun 2022 16:53:18 GMT

Sigurd Hellesvik is there any plan to add this support in the future (hopefully the near term future)? It seems the support is already in place in MCUBoot and this is a pretty valuable feature in the IoT world.

RE: Adding MCUBoot with encrypted images

Sigurd Hellesvik — Thu, 19 May 2022 14:10:06 GMT

Encrypted images for MCUBoot is not supported for the current versions of nRF Connect SDK, so I am not able to help you do this.

Regards,
Sigurd Hellesvik