We have our 1021 product running in encrypted mode using BEE.
That is, BEE_KEY0_SEL, EncryptedXIP and SRK fuses all active.
Using an ethernet port, the image will be updated, writing to an inactive (but part of encrypted region) bank in flash. After a power cycle the new image will be executed.
What is the recommended process for updating the firmware to maintain the BEE encryption?
Can the BEE be used to encrypt a plain image+csf as it is written to flash?
Or does the image have to be encrypted+csf, then downloaded and written to flash without the BEE?
There won't be any type of proprietary flashloader, just whatever methods are needed for receiving blocks of data and writing to the required areas of flash.