Secure boot for 32-bit Microcontrollers!
Go to file
Dominik Ermel 6f7f87384d boot: Fix swap-move algorithm failing to validate multi-image
In multi image swap validation of images could fail due to
headers being incorrectly re-read from storage.

Fixes #1768

Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
2024-02-20 16:29:41 +01:00
.github/workflows ci: Add test cases for ECDSA using PSA Crypto 2023-09-12 16:29:11 +02:00
boot boot: Fix swap-move algorithm failing to validate multi-image 2024-02-20 16:29:41 +01:00
ci ci: Add test cases for ECDSA using PSA Crypto 2023-09-12 16:29:11 +02:00
docs docs: release: Add release notes on changes 2024-01-08 15:35:53 +00:00
ext bootutil: Replace hash with SHA384 when P384 is used 2023-09-12 16:29:11 +02:00
ptest ptest: Update dependencies 2022-06-28 17:35:01 -06:00
samples samples: zephyr: Use the default MCUBoot PEM key file. 2023-11-01 09:53:10 -06:00
scripts imgtool: fix "align" script error 2024-02-07 10:48:03 -07:00
sim sim: Replace hash with SHA384 when P384 is used 2023-09-12 16:29:11 +02:00
testplan/mynewt bootutil: Remove P224 curve 2023-04-11 07:05:38 +02:00
zephyr zephyr: Add estimated image footer size to cache in sysbuild 2023-12-12 10:41:26 +00:00
.gitignore sim: Move Cargo package to top level 2021-09-17 10:45:53 -06:00
.gitmodules espressif: remove IDF git submodule and add its reference by param 2023-07-24 10:03:18 -03:00
.mbedignore boot_serial: Upgrade from cddl-gen 0.1.0 to zcbor 0.4.0 2022-04-06 17:46:15 -06:00
.travis.yml-disabled ci: disable Travis 2021-09-27 14:23:19 -03:00
CODE_OF_CONDUCT.md Create template code of conduct 2021-06-08 10:14:29 -06:00
Cargo.lock build(deps): bump bumpalo from 3.9.1 to 3.12.0 2023-02-25 09:39:31 -03:00
Cargo.toml sim: Move Cargo package to top level 2021-09-17 10:45:53 -06:00
LICENSE Add mention to tinycrypt LICENSE in main LICENSE 2017-09-12 10:15:24 -06:00
NOTICE boot: Add AES256 support for image encryption 2021-05-18 07:25:12 -03:00
README.md readme: update for next dev release 2023-11-01 09:51:15 -06:00
enc-aes128kw.b64 Add sample encryption keys 2018-10-12 13:36:13 -03:00
enc-aes256kw.b64 boot: Add AES256 support for image encryption 2021-05-18 07:25:12 -03:00
enc-ec256-priv.pem sim: add EC256 encryption key 2019-11-06 06:55:25 -03:00
enc-ec256-pub.pem sim: add EC256 encryption key 2019-11-06 06:55:25 -03:00
enc-rsa2048-priv.pem Add sample encryption keys 2018-10-12 13:36:13 -03:00
enc-rsa2048-pub.pem Add sample encryption keys 2018-10-12 13:36:13 -03:00
enc-x25519-priv.pem keys: Add sample x25519 priv/pub keys 2020-04-10 17:56:14 -03:00
enc-x25519-pub.pem keys: Add sample x25519 priv/pub keys 2020-04-10 17:56:14 -03:00
go.mod doc: fix github urls to use the new org 2020-11-10 14:19:19 -03:00
project.yml Update mynewt-core repo name 2018-08-03 15:31:39 -07:00
repository.yml mynewt: update to release 2.0.0 2023-10-23 17:36:54 -06:00
root-ec-p256-pkcs8.pem Add ECDSA-P256 key in PKCS#8 format 2019-01-18 09:44:48 -07:00
root-ec-p256.pem zephyr: Support RSA, and ECDSA P-256 signing 2017-02-02 08:39:18 -07:00
root-ec-p384-pkcs8.pem sim: PSA Crypto ECDSA enablement 2023-09-12 16:29:11 +02:00
root-ec-p384.pem sim: PSA Crypto ECDSA enablement 2023-09-12 16:29:11 +02:00
root-ed25519.pem Add bootutil support for ed25519 validation 2019-06-13 19:21:05 -03:00
root-rsa-2048.pem zephyr: Support RSA, and ECDSA P-256 signing 2017-02-02 08:39:18 -07:00
root-rsa-3072.pem Add simulator support for RSA-3072 sigs 2019-05-16 14:01:19 -03:00

README.md

MCUboot

Package on PyPI Coverity Scan Build Status Build Status (Sim) Build Status (Mynewt) Build Status (Espressif) Publishing Status (imgtool) Build Status (Travis CI) Apache 2.0

This is MCUboot version 2.1.0-dev

MCUboot is a secure bootloader for 32-bits microcontrollers. It defines a common infrastructure for the bootloader and the system flash layout on microcontroller systems, and provides a secure bootloader that enables easy software upgrade.

MCUboot is not dependent on any specific operating system and hardware and relies on hardware porting layers from the operating system it works with. Currently, MCUboot works with the following operating systems and SoCs:

RIOT is supported only as a boot target. We will accept any new port contributed by the community once it is good enough.

MCUboot How-tos

See the following pages for instructions on using MCUboot with different operating systems and SoCs:

There are also instructions for the Simulator.

Roadmap

The issues being planned and worked on are tracked using GitHub issues. To give your input, visit MCUboot GitHub Issues.

Source files

You can find additional documentation on the bootloader in the source files. For more information, use the following links:

  • boot/bootutil - The core of the bootloader itself.
  • boot/boot_serial - Support for serial upgrade within the bootloader itself.
  • boot/zephyr - Port of the bootloader to Zephyr.
  • boot/mynewt - Bootloader application for Apache Mynewt.
  • boot/nuttx - Bootloader application and port of MCUboot interfaces for Apache NuttX.
  • boot/mbed - Port of the bootloader to Mbed OS.
  • boot/espressif - Bootloader application and MCUboot port for Espressif SoCs.
  • boot/cypress - Bootloader application and MCUboot port for Cypress/Infineon SoCs.
  • imgtool - A tool to securely sign firmware images for booting by MCUboot.
  • sim - A bootloader simulator for testing and regression.

Joining the project

Developers are welcome!

Use the following links to join or see more about the project: