topic Re: Bootloader: where is encrypted image support (K64F) ? in MCUXpresso General

Bootloader: where is encrypted image support (K64F) ?

davenadler — Mon, 20 Jul 2020 15:30:59 GMT

Background: We're using Kinetis K64F in several products (and Freedom K64F boards for some development/test).
We need to distribute encrypted firmware update images to customers.

Historic implementation here used bootloader v2.0 (USB MSC and serial) without encryption.

MCU Bootloader v2.7.0 Reference Manual, Rev. 3, 11/2018 lists in 1.4 Features supported:
Support for encrypted image download

Unfortunately there is no information in this manual about encryption/decryption.

Obviously, we and your other customers need and examples and documentation on:

Preparation of image (key selection and SB processing), and
configuration of bootloader to decrypt image

Where is this information?

Thanks!
Best Regards, Dave

PS: I looked in the bootloader examples provided in SDK 2.7- Absolutely no encryption/decryption info.

Re: Bootloader: where is encrypted image support (K64F) ?

Alexis_A — Wed, 22 Jul 2020 23:45:17 GMT

Hello Dave,

In the following link, you can find the package for the MCU Bootloader | NXP, it contains information and the tools need it to encrypt and upload the binary.

Best Regards,

Alexis Andalon

Re: Bootloader: where is encrypted image support (K64F) ?

davenadler — Fri, 24 Jul 2020 19:42:55 GMT

nxf46116‌ - I found the link you posted above a while ago.
Unfortunately, in MCU Bootloader | NXP materials:

elftosb-gui only supports K3, not K64
elftosb mentions K3, not K64
there is no information about how to integrate required support into K64F bootloader
Is this elftosb different from bootloader version? If so, why?
mentions improved sb2 format, no idea if K64F bootloader supports this.

Again, we need specific instructions for K64F, including how to:

Generate keys needed for encryption and decryption,
Process ELF into SB (or is it SB2?) file (show the complete BD file), and
Configure K64F bootloader with key to decrypt SB (or SB2) image.

Ideally an example (bootloader plus encrypted blinky for Freedom K64F).

Any customers trying to deliver encrypted firmware images will need this!

Thanks in advance for any help!
Best Regards, Dave

Re: Bootloader: where is encrypted image support (K64F) ?

davenadler — Thu, 30 Jul 2020 22:43:20 GMT

nxf46116 Hello? Anybody there?

Re: Bootloader: where is encrypted image support (K64F) ?

davenadler — Fri, 28 Aug 2020 13:42:43 GMT

nxf46116‌, adrianpuga‌ - Hello?

Re: Bootloader: where is encrypted image support (K64F) ?

Alexis_A — Mon, 07 Sep 2020 21:27:22 GMT

Hello Dave,

Find attached a guide on how to load an encrypted image.

Best Regards,

Alexis Andalon