doc about encrypted_xip_platform_*.c (in mcuboot)

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

doc about encrypted_xip_platform_*.c (in mcuboot)

466 Views
mastupristi
Senior Contributor I

Hello,

In the mcuboot sources, it is possible to find a bunch of files provided by NXP to deal with encrypted xip: SDK_25_06_00_EVK-MIMXRT1020/middleware/mcuboot_opensource/boot/nxp_mcux_sdk/encrypted_xip/

In my projects, I use RT117x, RT105x, and RT102x, so I deal with BEE and OTFAD peripherals.

I searched for documentation and examples for these files, for example here https://mcuxpresso.nxp.com/mcuxsdk/latest/html/middleware/mcuboot_opensource/README.html# but I didn't find what I was looking for.

I need to know:

  • features
  • usage examples
  • API reference

My use case is as follows:

boot_images.png

  • Image 0 is a second stage bootloader. It implement the USB host mass storage stack, which is the only way to update the device.
  • Image 1 is the actual application.

I believe that both images need to be encrypted, but I am not certain.

Can you tell me where to find a reference design that uses these sources?

Furthermore, having two images, I need mcuboot 2.2.0 (2.1.0 does not work with multiple images).
Version 2.1.0 is integrated into the last SDK, as indicated here:

mastupristi_0-1754315658319.png

best regards

Max

 

 

0 Kudos
Reply
1 Reply

285 Views
diego_charles
NXP TechSupport
NXP TechSupport

Hi @mastupristi 

I am sorry for the delayed response. 

As an alternative solution, at this moment , we  have our SBL, which is based on the MCUboot, enabling encrypted XIP. However it is based on an older version of the MCUBoot. 

I have been checking internally, and I the SDK team said that the SDK now integrates latest version of the MCUboot. 

Basically you want to have addittional information covering : 

  • features
  • usage examples
  • API reference

but for encrypted application correct? Can we say that an example about using on-chip OTFAD in conjunction with MCUBoot  could work at this moment for you? 

Diego

0 Kudos
Reply
%3CLINGO-SUB%20id%3D%22lingo-sub-2146231%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3Edoc%20about%20encrypted_xip_platform_*.c%20(in%20mcuboot)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2146231%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHello%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIn%20the%20mcuboot%20sources%2C%20it%20is%20possible%20to%20find%20a%20bunch%20of%20files%20provided%20by%20NXP%20to%20deal%20with%20encrypted%20xip%3A%26nbsp%3BSDK_25_06_00_EVK-MIMXRT1020%2Fmiddleware%2Fmcuboot_opensource%2Fboot%2Fnxp_mcux_sdk%2Fencrypted_xip%2F%3C%2FP%3E%3CP%3EIn%20my%20projects%2C%20I%20use%20RT117x%2C%20RT105x%2C%20and%20RT102x%2C%20so%20I%20deal%20with%20BEE%20and%20OTFAD%20peripherals.%3C%2FP%3E%3CP%3EI%20searched%20for%20documentation%20and%20examples%20for%20these%20files%2C%20for%20example%20here%20%3CA%20href%3D%22https%3A%2F%2Fmcuxpresso.nxp.com%2Fmcuxsdk%2Flatest%2Fhtml%2Fmiddleware%2Fmcuboot_opensource%2FREADME.html%23%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmcuxpresso.nxp.com%2Fmcuxsdk%2Flatest%2Fhtml%2Fmiddleware%2Fmcuboot_opensource%2FREADME.html%23%3C%2FA%3E%20but%20I%20didn't%20find%20what%20I%20was%20looking%20for.%3C%2FP%3E%3CP%3EI%20need%20to%20know%3A%3C%2FP%3E%3CUL%3E%3CLI%3Efeatures%3C%2FLI%3E%3CLI%3Eusage%20examples%3C%2FLI%3E%3CLI%3EAPI%20reference%3C%2FLI%3E%3C%2FUL%3E%3CP%3EMy%20use%20case%20is%20as%20follows%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22boot_images.png%22%20style%3D%22width%3A%20244px%3B%22%3E%3Cspan%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22boot_images.png%22%20style%3D%22width%3A%20244px%3B%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F350821i804091F4CD4C1FF8%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22boot_images.png%22%20alt%3D%22boot_images.png%22%20%2F%3E%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FP%3E%3CUL%3E%3CLI%3EImage%200%20is%20a%20second%20stage%20bootloader.%20It%20implement%20the%20USB%20host%20mass%20storage%20stack%2C%20which%20is%20the%20only%20way%20to%20update%20the%20device.%3C%2FLI%3E%3CLI%3EImage%201%20is%20the%20actual%20application.%3C%2FLI%3E%3C%2FUL%3E%3CP%3EI%20believe%20that%20both%20images%20need%20to%20be%20encrypted%2C%20but%20I%20am%20not%20certain.%3C%2FP%3E%3CP%3ECan%20you%20tell%20me%20where%20to%20find%20a%20reference%20design%20that%20uses%20these%20sources%3F%3C%2FP%3E%3CP%3EFurthermore%2C%20having%20two%20images%2C%20I%20need%20mcuboot%202.2.0%20(2.1.0%20does%20not%20work%20with%20multiple%20images).%3CBR%20%2F%3EVersion%202.1.0%20is%20integrated%20into%20the%20last%20SDK%2C%20as%20indicated%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2Fnxp-mcuxpresso%2Fmcuboot%2Ftree%2Fd01a792dce6e332b4b5df02b980c3c6d5505f2e9%3Ftab%3Dreadme-ov-file%23mcuboot%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22mastupristi_0-1754315658319.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cspan%20class%3D%22lia-inline-image-display-wrapper%22%20image-alt%3D%22mastupristi_0-1754315658319.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3Cimg%20src%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F350823i1B96786C9B1489A6%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22mastupristi_0-1754315658319.png%22%20alt%3D%22mastupristi_0-1754315658319.png%22%20%2F%3E%3C%2Fspan%3E%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%3CP%3Ebest%20regards%3C%2FP%3E%3CP%3EMax%3C%2FP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2166167%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%20translate%3D%22no%22%3ERe%3A%20doc%20about%20encrypted_xip_platform_*.c%20(in%20mcuboot)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2166167%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fcommunity.nxp.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F124967%22%20target%3D%22_blank%22%3E%40mastupristi%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20am%20sorry%20for%20the%20delayed%20response.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAs%20an%20alternative%20solution%2C%20at%20this%20moment%20%2C%20we%26nbsp%3B%20have%20our%20%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2Fnxp-mcuxpresso%2Fsbl%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3ESBL%3C%2FA%3E%2C%20which%20is%20based%20on%20the%20MCUboot%2C%20enabling%20encrypted%20XIP.%20However%20it%20is%20based%20on%20an%20older%20version%20of%20the%20MCUBoot.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20been%20checking%20internally%2C%20and%20I%20the%20SDK%20team%20said%20that%20the%20SDK%20now%20integrates%20latest%20version%20of%20the%20MCUboot.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBasically%20you%20want%20to%20have%20addittional%20information%20covering%20%3A%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3Efeatures%3C%2FLI%3E%0A%3CLI%3Eusage%20examples%3C%2FLI%3E%0A%3CLI%3EAPI%20reference%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3Ebut%20for%20encrypted%20application%20correct%3F%20Can%20we%20say%20that%20an%20example%20about%20using%20on-chip%20OTFAD%20in%20conjunction%20with%20MCUBoot%26nbsp%3B%20could%20work%20at%20this%20moment%20for%20you%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDiego%3C%2FP%3E%3C%2FLINGO-BODY%3E