Bootloader: where is encrypted image support (K64F) ?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Bootloader: where is encrypted image support (K64F) ?

1,970 Views
davenadler
Senior Contributor I

Background: We're using Kinetis K64F in several products (and Freedom K64F boards for some development/test).
We need to distribute encrypted firmware update images to customers.

Historic implementation here used bootloader v2.0 (USB MSC and serial) without encryption.

MCU Bootloader v2.7.0 Reference Manual, Rev. 3, 11/2018 lists in 1.4 Features supported:
Support for encrypted image download

Unfortunately there is no information in this manual about encryption/decryption.

Obviously, we and your other customers need and examples and documentation on:

  1. Preparation of image (key selection and SB processing), and
  2. configuration of bootloader to decrypt image

Where is this information?

Thanks!
Best Regards, Dave

PS: I looked in the bootloader examples provided in SDK 2.7- Absolutely no encryption/decryption info.

Labels (1)
0 Kudos
5 Replies

1,797 Views
davenadler
Senior Contributor I

nxf46116 Hello? Anybody there?

0 Kudos

1,797 Views
Alexis_A
NXP TechSupport
NXP TechSupport

Hello Dave,

In the following link, you can find the package for the MCU Bootloader | NXP, it contains information and the tools need it to encrypt and upload the binary.

Best Regards,

Alexis Andalon

0 Kudos

1,797 Views
davenadler
Senior Contributor I

nxf46116‌ - I found the link you posted above a while ago.
Unfortunately, in MCU Bootloader | NXP materials:

  1. elftosb-gui only supports K3, not K64
  2. elftosb mentions K3, not K64
  3. there is no information about how to integrate required support into K64F bootloader
  4. Is this elftosb different from  bootloader version? If so, why?
  5. mentions improved sb2 format, no idea if K64F bootloader supports this.


Again, we need specific instructions for K64F, including how to:

  1. Generate keys needed for encryption and decryption,
  2. Process ELF into SB (or is it SB2?) file (show the complete BD file), and
  3. Configure K64F bootloader with key to decrypt SB (or SB2) image.

Ideally an example (bootloader plus encrypted blinky for Freedom K64F).

Any customers trying to deliver encrypted firmware images will need this!

Thanks in advance for any help!
Best Regards, Dave

0 Kudos

1,797 Views
davenadler
Senior Contributor I

nxf46116‌, adrianpuga‌ - Hello?

0 Kudos

1,771 Views
Alexis_A
NXP TechSupport
NXP TechSupport

Hello Dave,

 

Find attached a guide on how to load an encrypted image.

 

Best Regards,

Alexis Andalon

0 Kudos