Hi!
I am currently working on RW612 and I want to utilize IPED feature to encrypt data on external flash. I want to use MCUboot which will be only image from ROM bootloader perspective (it will have boot header with fcb, version and IPED configuration). It shall be also standalone IPED region (lets assume that MCUboot is at 0x8000000 to 0x8020000.
MCUboot looks for newest application image (MCUboot XIP version), which lies at address 0x8020000 (primary image) or 0x8120000 (secondary image). I would like to have both application images defined as separated IPED regions. Additionally, I have common data region at 0x8220000, which also shal be encrypted with IPED.
Here are couple of questions:
1. If MCUboot is encrypted with IPED on its own region, will it be able to execute primary/secondary image (they are separate IPED regions)?
2. Can primary and secondary image read data from commong data region (it is also separated IPED region)?
3. If I use my own firmware update implementation, will it be able to write new image with IPED encryption (i.e. updating secondary image from primary image)? Or I have to utilize SB files firmware update utility?
Hi,
Regarding your queries I'd recommend you look at the MCUXpresso Provisioning Tools User Guide and UM11865 sections 11.3.1.1.3.3 (Configuration of IPED for boot ROM) and 11.4.6 (Example of downloading and programming an image to IPED-enabled Flash using the
blhost tool).
Regards,
Daniel.