Regarding the public key for MCUboot and keeping it in HW (MCUBOOT_HW_KEY)

[Srikara]

Hi 

we are using nRF connect SDK 2.1.0 and also MCU boot.

Following the steps to generated the keys for signing the images.

https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/mcuboot/imgtool.html

One issue we might have is keeping the publick key in Keys.c which our security team may not accept.

But as per the blog above we can use MCUBOOT_HW_KEY to keep it in HW.

How we can provision the public key to HW and how we can pull that key for verification of signing.

can you please help with the complete details for this.

[Raoul]

Hi Srikara,

Take a look at this section from the bootloader documentation:

https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/mcuboot/design.html#using-hardware-keys-for-verification

and let me know if you need further help.

Best regards,

Raoul

[Srikara]

Hi

Actually i am able to do the public key and private key with the help of same documentation and keeping publick key in keys.c.

The help is needed to keep this key in HW itself by avoiding keys.c modification.

We need help on the section "Using hardware keys for verification" where MCUBOOT_HW_KEY usage is mentioned.

The help needed is how to provison the public key, and how to retrive. can you please provide the complete steps.