3cabd927a7
For some reason, the ECDSA signature generation code attempted to adjust the length of the ASN.1 of the actual signature. It wasn't doing this right, and was creating ASN.1 expecting many more entries than were present. The half-run parser in the tinycrypt ECDSA signature check didn't care about this, but mbed TLS's signature check does care. The intent of the padding was to be able to predict the size of the TLV before writing it out. Keep the padding for now, even though there is no simple way of knowing how many pad bytes to remove (just removing them will remove extra if there is a zero in the last byte of the signature. A future change will eliminate the padding, as it should no longer be needed. Signed-off-by: David Brown <david.brown@linaro.org> |
||
|---|---|---|
| boot | ||
| ci | ||
| docs | ||
| ext | ||
| ptest | ||
| samples | ||
| scripts | ||
| sim | ||
| testplan/mynewt | ||
| .gitignore | ||
| .gitmodules | ||
| .travis.yml | ||
| LICENSE | ||
| NOTICE | ||
| README.md | ||
| enc-aes128kw.b64 | ||
| enc-ec256-priv.pem | ||
| enc-ec256-pub.pem | ||
| enc-rsa2048-priv.pem | ||
| enc-rsa2048-pub.pem | ||
| project.yml | ||
| repository.yml | ||
| root-ec-p256-pkcs8.pem | ||
| root-ec-p256.pem | ||
| root-ed25519.pem | ||
| root-rsa-2048.pem | ||
| root-rsa-3072.pem | ||
| version.yml | ||
README.md
mcuboot
This is mcuboot version 1.4.0
MCUboot is a secure bootloader for 32-bit MCUs. The goal of MCUboot is to define a common infrastructure for the bootloader, system flash layout on microcontroller systems, and to provide a secure bootloader that enables simple software upgrades.
MCUboot is operating system and hardware independent and relies on hardware porting layers from the operating. Currently, mcuboot works with both the Apache Mynewt and Zephyr operating systems, but more ports are planned in the future. RIOT is currently supported as a boot target with a complete port planned.
Using MCUboot
Instructions for different operating systems can be found here:
Roadmap
The issues being planned and worked on are tracked using GitHub issues. To participate please visit:
Issues were previously tracked on MCUboot JIRA
, but it is now deprecated.
Browsing
Information and documentation on the bootloader are stored within the source.
It was previously also documented on confluence:
MCUBoot Confluence
however, it is now deprecated and not currently maintained
For more information in the source, here are some pointers:
- boot/bootutil: The core of the bootloader itself.
- boot/boot_serial: Support for serial upgrade within the bootloader itself.
- boot/zephyr: Port of the bootloader to Zephyr
- boot/mynewt: Mynewt bootloader app
- imgtool: A tool to securely sign firmware images for booting by mcuboot.
- sim: A bootloader simulator for testing and regression
Joining
Developers welcome!
- Our developer mailing list: http://lists.runtime.co/mailman/listinfo/dev-mcuboot_lists.runtime.co
- Our Slack channel: https://mcuboot.slack.com/
Get your invite here! - Our IRC channel: http://irc.freenode.net, #mcuboot