IPED (PRINCE) Reading common data region from different, IPED encrypted images

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

IPED (PRINCE) Reading common data region from different, IPED encrypted images

572 Views
Maciej_Jj
Contributor II

Hi!

I am currently working on RW612 and I want to utilize IPED feature to encrypt data on external flash. I want to use MCUboot which will be only image from ROM bootloader perspective (it will have boot header with fcb, version and IPED configuration). It shall be also standalone IPED region (lets assume that MCUboot is at 0x8000000 to 0x8020000.

MCUboot looks for newest application image (MCUboot XIP version), which lies at address 0x8020000 (primary image) or 0x8120000 (secondary image). I would like to have both application images defined as separated IPED regions. Additionally, I have common data region at 0x8220000, which also shal be encrypted with IPED.

Here are couple of questions:

1. If MCUboot is encrypted with IPED on its own region, will it be able to execute primary/secondary image (they are separate IPED regions)?

2. Can primary and secondary image read data from commong data region (it is also separated IPED region)?

3. If I use my own firmware update implementation, will it be able to write new image with IPED encryption (i.e. updating secondary image from primary image)? Or I have to utilize SB files firmware update utility?

Tags (2)
0 Kudos
Reply
1 Reply

523 Views
DanielRuvalcaba
NXP TechSupport
NXP TechSupport

Hi,

Regarding your queries I'd recommend you look at the MCUXpresso Provisioning Tools User Guide and UM11865 sections 11.3.1.1.3.3 (Configuration of IPED for boot ROM) and 11.4.6 (Example of downloading and programming an image to IPED-enabled Flash using the
blhost tool).

 

Regards,

Daniel.

0 Kudos
Reply