| commit | e3f895d7ef8304a8c87f4cb85bd5552cb68d61df | [log] [tgz] |
|---|---|---|
| author | Jerzy Kasenberg <jerzy.kasenberg@codecoup.pl> | Tue Apr 12 15:05:33 2022 +0200 |
| committer | David Brown <davidb@davidb.org> | Tue Oct 04 08:52:57 2022 -0600 |
| tree | ab634f9f62339714d7071454a45e1a977bf8fdd2 | |
| parent | 4e2cdfe82f988d1f50cb797649d27520ffd44ea0 [diff] |
Add downgrade prevention for swaps Currently, downgrade prevention was limited to overwrite only builds (version check) or devices with hardware storage for security counter. This extends downgrade prevention to be used when swap update is selected. Unlike MCUBOOT_HW_ROLLBACK_PROT option it does not require user code to provide external way to store security counter. Security counter from slot 1 image is used for comparison. With security counter usage it is possible to have limited software rollback if security counter was not incremented. It is possible to use image version where strict rule for image version comparison prevents any downgrades. Downgrade prevention is also added to mynewt configuration. If image in slot 1 is marked as pending and downgrade prevention is in place, image will be deleted to avoid check on next boot. Signed-off-by: Jerzy Kasenberg <jerzy.kasenberg@codecoup.pl>
- boot/bootutil/src/image_validate.c[diff]
- boot/bootutil/src/loader.c[diff]
- boot/mynewt/mcuboot_config/include/mcuboot_config/mcuboot_config.h[diff]
- boot/mynewt/mcuboot_config/syscfg.yml[diff]
- .github/
- boot/
- ci/
- docs/
- ext/
- ptest/
- samples/
- scripts/
- sim/
- testplan/
- zephyr/
- .gitignore
- .gitmodules
- .mbedignore
- .travis.yml-disabled
- Cargo.lock
- Cargo.toml
- CODE_OF_CONDUCT.md
- enc-aes128kw.b64
- enc-aes256kw.b64
- enc-ec256-priv.pem
- enc-ec256-pub.pem
- enc-rsa2048-priv.pem
- enc-rsa2048-pub.pem
- enc-x25519-priv.pem
- enc-x25519-pub.pem
- go.mod
- LICENSE
- NOTICE
- project.yml
- README.md
- repository.yml
- root-ec-p256-pkcs8.pem
- root-ec-p256.pem
- root-ed25519.pem
- root-rsa-2048.pem
- root-rsa-3072.pem
MCUboot
This is MCUboot version 1.10.0-dev
MCUboot is a secure bootloader for 32-bits microcontrollers. It defines a common infrastructure for the bootloader and the system flash layout on microcontroller systems, and provides a secure bootloader that enables easy software upgrade.
MCUboot is not dependent on any specific operating system and hardware and relies on hardware porting layers from the operating system it works with. Currently, MCUboot works with the following operating systems and SoCs:
RIOT is supported only as a boot target. We will accept any new port contributed by the community once it is good enough.
MCUboot How-tos
See the following pages for instructions on using MCUboot with different operating systems and SoCs:
There are also instructions for the Simulator.
Roadmap
The issues being planned and worked on are tracked using GitHub issues. To give your input, visit MCUboot GitHub Issues.
Source files
You can find additional documentation on the bootloader in the source files. For more information, use the following links:
- boot/bootutil - The core of the bootloader itself.
- boot/boot_serial - Support for serial upgrade within the bootloader itself.
- boot/zephyr - Port of the bootloader to Zephyr.
- boot/mynewt - Bootloader application for Apache Mynewt.
- boot/nuttx - Bootloader application and port of MCUboot interfaces for Apache NuttX.
- boot/mbed - Port of the bootloader to Mbed OS.
- boot/espressif - Bootloader application and MCUboot port for Espressif SoCs.
- boot/cypress - Bootloader application and MCUboot port for Cypress/Infineon SoCs.
- imgtool - A tool to securely sign firmware images for booting by MCUboot.
- sim - A bootloader simulator for testing and regression.
Joining the project
Developers are welcome!
Use the following links to join or see more about the project: