2017-07-20 20:20:18 +08:00
|
|
|
mcuboot 0.9 - Release Notes
|
|
|
|
|
===========================
|
|
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
This is the first release of MCUBoot, a secure bootloader for 32-bit MCUs.
|
2017-07-20 20:20:18 +08:00
|
|
|
It is designed to be operating system-agnostic and works over any transport -
|
|
|
|
|
wired or wireless. It is also hardware independent, and relies on hardware
|
|
|
|
|
porting layers from the operating system it works with. For the first release,
|
2017-07-21 21:19:35 +08:00
|
|
|
we have support for three open source operating systems: Apache Mynewt, Zephyr
|
|
|
|
|
and RIOT.
|
2017-07-20 20:20:18 +08:00
|
|
|
|
|
|
|
|
About this release:
|
|
|
|
|
===================
|
|
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
* This release supports building with and running Apache Mynewt and Zephyr
|
|
|
|
|
targets.
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
* RIOT is supported as a running target.
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
* Image integrity is provided with SHA256.
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
* Image originator authenticity is provided supporting the following
|
|
|
|
|
signature algorithms:
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
- RSA 2048 and RSA PKCS#1 v1.5 or v2.1
|
|
|
|
|
- Elliptic curve DSA with secp224r1 and secp256r1
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
* Two firmware upgrade algorithms are provided:
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
- An overwrite only which upgrades slot 0 with the image in slot 1.
|
|
|
|
|
- A swapping upgrade which enables image test, allowing for rollback to a
|
2017-07-22 02:45:24 +08:00
|
|
|
previous known good image.
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-22 02:38:04 +08:00
|
|
|
* Supports both mbed-TLS and tinycrypt as backend crypto libraries. One of them
|
|
|
|
|
must be defined and the chosen signing algorithm will require a particular
|
|
|
|
|
library according to this list:
|
2017-07-22 02:44:05 +08:00
|
|
|
|
2017-07-22 02:38:04 +08:00
|
|
|
- RSA 2048 needs mbed TLS
|
|
|
|
|
- ECDSA secp224r1 needs mbed TLS
|
|
|
|
|
- ECDSA secp256r1 needs tinycrypt as well as the ASN.1 code from mbed TLS
|
2017-07-22 02:45:24 +08:00
|
|
|
(so still needs that present).
|
2017-07-20 20:20:18 +08:00
|
|
|
|
|
|
|
|
Known issues:
|
|
|
|
|
=============
|
|
|
|
|
|
2017-07-21 21:19:35 +08:00
|
|
|
* The image header and TLV formats are planned to change with release 1.0:
|
|
|
|
|
https://runtimeco.atlassian.net/browse/MCUB-66
|
