This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Creating a safe DFU bootloader

I am trying to figure out a way to secure my DFU (via BLE) such that someone cannot sniff the and copy my hex code (and decompile). I cannot use Pairing or Bonding as that doesn't work for our usecase. So I need to a way to encrypt my hex image in a way that it can be decrypted in the bootloader upon reciept. As far as I can see there is no AES decryption available, so the only option would be inventing my own data encryption/decryption. However I wanted to post here just in case I am wrong in my conclusion.

Related