Bootloader: where is encrypted image support (K64F) ?

[davenadler]

Background: We're using Kinetis K64F in several products (and Freedom K64F boards for some development/test).
We need to distribute encrypted firmware update images to customers.

Historic implementation here used bootloader v2.0 (USB MSC and serial) without encryption.

MCU Bootloader v2.7.0 Reference Manual, Rev. 3, 11/2018 lists in 1.4 Features supported:
Support for encrypted image download

Unfortunately there is no information in this manual about encryption/decryption.

Obviously, we and your other customers need and examples and documentation on:

1. Preparation of image (key selection and SB processing), and
2. configuration of bootloader to decrypt image

Where is this information?

Thanks!
Best Regards, Dave

PS: I looked in the bootloader examples provided in SDK 2.7- Absolutely no encryption/decryption info.

[davenadler]

nxf46116 Hello? Anybody there?

[Alexis_A]

Hello Dave,

In the following link, you can find the package for the MCU Bootloader | NXP, it contains information and the tools need it to encrypt and upload the binary.

Best Regards,

Alexis Andalon

[davenadler]

nxf46116‌ - I found the link you posted above a while ago.
Unfortunately, in MCU Bootloader | NXP materials:

1. elftosb-gui only supports K3, not K64
2. elftosb mentions K3, not K64
3. there is no information about how to integrate required support into K64F bootloader
4. Is this elftosb different from  bootloader version? If so, why?
5. mentions improved sb2 format, no idea if K64F bootloader supports this.

Again, we need specific instructions for K64F, including how to:

1. Generate keys needed for encryption and decryption,
2. Process ELF into SB (or is it SB2?) file (show the complete BD file), and
3. Configure K64F bootloader with key to decrypt SB (or SB2) image.

Ideally an example (bootloader plus encrypted blinky for Freedom K64F).

Any customers trying to deliver encrypted firmware images will need this!

Thanks in advance for any help!
Best Regards, Dave

[davenadler]

nxf46116‌, adrianpuga‌ - Hello?

[Alexis_A]

Hello Dave,

Find attached a guide on how to load an encrypted image.

Best Regards,

Alexis Andalon