Secure boot for 32-bit Microcontrollers!
Go to file
David Vincze 25459bffcc docs: Provide description for multiple features
- Update documentation of 'HW based downgrade prevention'
- Add description for the following features:
      MCUBOOT_MEASURED_BOOT
      MCUBOOT_DATA_SHARING
      MCUBOOT_HW_KEY

Change-Id: If7247e906de3028d44cdd9d14a5004661fb955af
Signed-off-by: David Vincze <david.vincze@linaro.org>
2020-04-22 14:25:21 -06:00
boot Use _Static_assert on all platforms 2020-04-21 08:20:29 -06:00
ci ci: add tool to check for Cargo features 2020-01-07 16:03:55 -03:00
docs docs: Provide description for multiple features 2020-04-22 14:25:21 -06:00
ext ext: fiat: add X25519 routines from upstream 2020-04-10 17:56:14 -03:00
ptest Update Cargo.lock files 2019-07-25 16:24:20 -05:00
samples zephyr: fix include in hello-world app 2019-12-16 16:08:00 -03:00
scripts imgtool: release 1.6.0alpha3 2020-04-14 12:27:16 +02:00
sim sim: Add test support for x25519 encrypted images 2020-04-10 17:56:14 -03:00
testplan/mynewt apps: update dependencies & syscfgs as per mcumgr 2019-10-10 18:03:59 -03:00
zephyr zephyr: Add module.yml for Zephyr module integration 2019-12-16 18:40:34 +01:00
.gitignore Add imgtool publishing support 2019-01-08 07:29:24 -02:00
.gitmodules serial_recovery: Replace CBOR decoding code with generated code 2020-03-24 13:10:17 -06:00
.travis.yml travis: Add x25519 encrypted image testing to CI 2020-04-10 17:56:14 -03:00
LICENSE Add mention to tinycrypt LICENSE in main LICENSE 2017-09-12 10:15:24 -06:00
NOTICE imgtool: Add security counter to image manifest 2020-02-25 23:43:12 +01:00
README.md Update to v1.5.0 2020-02-19 10:29:01 -03:00
enc-aes128kw.b64 Add sample encryption keys 2018-10-12 13:36:13 -03:00
enc-ec256-priv.pem sim: add EC256 encryption key 2019-11-06 06:55:25 -03:00
enc-ec256-pub.pem sim: add EC256 encryption key 2019-11-06 06:55:25 -03:00
enc-rsa2048-priv.pem Add sample encryption keys 2018-10-12 13:36:13 -03:00
enc-rsa2048-pub.pem Add sample encryption keys 2018-10-12 13:36:13 -03:00
enc-x25519-priv.pem keys: Add sample x25519 priv/pub keys 2020-04-10 17:56:14 -03:00
enc-x25519-pub.pem keys: Add sample x25519 priv/pub keys 2020-04-10 17:56:14 -03:00
project.yml Update mynewt-core repo name 2018-08-03 15:31:39 -07:00
repository.yml mynewt: Update latest tags in repository.yml 2020-03-19 14:42:08 -06:00
root-ec-p256-pkcs8.pem Add ECDSA-P256 key in PKCS#8 format 2019-01-18 09:44:48 -07:00
root-ec-p256.pem zephyr: Support RSA, and ECDSA P-256 signing 2017-02-02 08:39:18 -07:00
root-ed25519.pem Add bootutil support for ed25519 validation 2019-06-13 19:21:05 -03:00
root-rsa-2048.pem zephyr: Support RSA, and ECDSA P-256 signing 2017-02-02 08:39:18 -07:00
root-rsa-3072.pem Add simulator support for RSA-3072 sigs 2019-05-16 14:01:19 -03:00

README.md

mcuboot

Coverity Scan Build Status Build/Test

This is mcuboot version 1.5.0

MCUboot is a secure bootloader for 32-bit MCUs. The goal of MCUboot is to define a common infrastructure for the bootloader, system flash layout on microcontroller systems, and to provide a secure bootloader that enables simple software upgrades.

MCUboot is operating system and hardware independent and relies on hardware porting layers from the operating. Currently, mcuboot works with both the Apache Mynewt and Zephyr operating systems, but more ports are planned in the future. RIOT is currently supported as a boot target with a complete port planned.

Using MCUboot

Instructions for different operating systems can be found here:

Roadmap

The issues being planned and worked on are tracked using GitHub issues. To participate please visit:

MCUBoot GitHub Issues

Issues were previously tracked on MCUboot JIRA , but it is now deprecated.

Browsing

Information and documentation on the bootloader are stored within the source.

It was previously also documented on confluence: MCUBoot Confluence however, it is now deprecated and not currently maintained

For more information in the source, here are some pointers:

  • boot/bootutil: The core of the bootloader itself.
  • boot/boot_serial: Support for serial upgrade within the bootloader itself.
  • boot/zephyr: Port of the bootloader to Zephyr
  • boot/mynewt: Mynewt bootloader app
  • imgtool: A tool to securely sign firmware images for booting by mcuboot.
  • sim: A bootloader simulator for testing and regression

Joining

Developers welcome!