Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OTA Firmware Upload does not work with Encryption #20

Open
jamesmunns opened this issue Mar 31, 2016 · 0 comments
Open

OTA Firmware Upload does not work with Encryption #20

jamesmunns opened this issue Mar 31, 2016 · 0 comments

Comments

@jamesmunns
Copy link

Currently, the Bootloader does not appear to support Encryption (specifically AES-128 with the NRG family).

This causes a problem when the user is using encryption in the User Application, but would like to use SwapDMT-cmd for OTA firmware update.

The software will need to be updated with one of the following fixes:

  1. The SwapDMT application should switch to unencrypted mode when uploading firmware
    • This might be the easiest approach, should be fixable only in the Python tools
    • However then the firmware will be transmitted unencrypted
  2. Add encryption support in the Bootloader, and store the AES key somewhere accessible from both, such as an nvram buffer
    • This would not be backwards compatible with previous versions of the bootloader
    • This would be more secure

We have developed a workaround right now by merging the encryption code from the Application's SWAP into the bootloader and recompiling, but it does not seem to be general enough to share here.

I am filing this issue here, because it may affect a few different repos (SWAP lib, Python Tools, etc).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant