Encrypted DFU nrf5340 in NCS

[Robert de Brum]

Is encrypted DFU supported in NCS yet? I have not found a concise answer for this yet, though I know that MCUBoot (used in NCS) does support image encryption.

I am looking to perform BLE FOTA's in the field with encrypted and signed images.

How could I achieve this (we will need higher security than just signing the payload) for the nrf5340?

[Raoul]

Hi Robert,

I know there is interest from customers, but I'm sorry to say that we don't officially support encrypted DFU yet. However since it is supported by MCUboot as you say, I see that some customers have tried to include encryption anyway.

Please check out  RE: nRF52840 + NCS + MCUBoot, CC310-enabled image encryption? and  How to encrypt FW for MCUBOOT image update? (both via this recent case, where a customer asked the same).

Besides this, note that the "netboot" bootloader for the network core has zero support for encryption, and encryption while using two-stage bootloaders is also impossible. I hope we can provide this in the future.

Best regards,

Raoul

[Robert de Brum]

Would there be a plan to roll out encrypted DFU support anytime soon?

Thanks for your response and I look forward to future responses.

[Raoul]

Hi Robert,

Unfortunately I can't comment on feature roadmaps. I can only request you to contact your Regional Sales Manager to request this feature, and inquire about plans. Sorry about that.

Best regards,

Raoul