Hello !
It is not so clear whole chain for processing data in case of ReceiveSbFile() functionality.
If SB2.1 file format in use and firmware is encrypted , does ROM is able to decrypt it , init PRINCE and encrypt it on fly ?
So basically I need to prepare file and send it to ROM.
File is encrypted for be save in transit and after that re-encrypted inside ROM by using PRINCE and it able to boot.
if SecureBoot is enabled, does all Readmemory and Write/Executeinmemory commands are disabled ?
I try to undestand how safe supported set of command if Secure bit boot is enabled.
Regards,
Eugene
HI
The SB2.0 file created with the updated binary image can be loaded into the device through ISP command handler with command “receive-sb-file“
blhost -p COMxx receive-sb-file <path to the secured binary(.sb2)>
The SB2.1 file created with the updated binary image can be loaded into the device through ISP command handler with command “receive-sb-file“ but keep in mind that before sending SB2.1 file into device has to be there already RKTH in CMPA (see an12283, chapter 5.5 CMPA preparation) and enabled RoT keys in ROTKH_REVOKE field at CFPA page address 0x9DE18 (see chapter 5.4 CFPA preparation).
blhost -p COMxx receive-sb-file <path to the secured binary(.sb2)>
After successfully loading the SB2 file it is executed as configured in SB configuration file (.bd file). The above figure shows an example of SB configuration file. When the file is executed, the internal flash address from 0x0 to 0x40000 is erased. After flash erase operation, the image mentioned in the sources parameter is loaded to address 0x0.
Reset the device after these operations. The updated image loaded into internal flash starts to execute.
Have a great day,
Jun Zhang
-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------