This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Secure DFU/OTA as good as possible to prevent copying my firmware

Hi Nordic,

I would like to re/program my device using a OTA BLE Bootloader but i don't want others to copy my firmware or at least make it very hard. As far as i know there is no magic solution to this. To prevent people from copying my firmware there are to things i need to do:

  1. prevent people from sniffing my code while programming over BLE = encrypt the send data using e.g. AES encryption
  2. prevent copying my code using a e.g. J-Link thus i need to lock the chip

I program my application for the first time using nRFgo Studio and lock the entire chip from read back. Is it now still possible to upgrade via OTA DFU using something like the following:

  1. erase the app
  2. programm app and lock chip at the end

Can i erase/write my application to flash if RBPCONF/PALL is set? If not, can i programm the "LOCK ENTIRE CHIP" fuse (RBPCONF) in my application or is this just possible using a external programmer?

How would you guys do this?

Kind regards Marius

Related