Secure IoT updates bootloader on NXP FRDM-K64F ARM Cortex-M4

on YouTube ↗06m

" summary

Port of mcuboot runs on an NXP FRDM‑K64F Cortex‑M4 and is now a standalone project and a Zephyr port. Demonstrates OTA: new firmware staged in a second flash partition, signature checked with ECDSA over SHA‑256, swap to the new image, and automatic rollback on failure if tests fail. Demo shows a corrupted byte is rejected. Requires SOC flash locking to protect the bootloader from being overwritten.

AI-written summary · about

" chapters (5)

1. 0:00Introduction to MQ boot
2. 1:02Over-the-air firmware updates
3. 2:15Security and hardware locking
4. 3:25Role of bootloaders in IoT
5. 4:38Broader security and Laro

" related talks

• 24mIntroduction to MCUboot: Secure Bootloader and Easy Firmware UpdatesAlmir Kazunari Okato · Open Source Summit Latin America 2022
• 46mEnhancing System Security by Integrating Zephyr Bootloader and MCUbootAfzal Hasan, Priya Dixit · Zephyr Developer Summit 2023
• 21mSecure and Encrypted Boot in Zephyr RTOSParthiban N · Open Source Summit Europe 2024
• 38mBoot to Cloud Security Considerations with IoTKevin Townsend · Zephyr Developer Summit 2023
• 42mApache Mynewt Bootloader for Reliable and Secure Firmware UpgradesChris Collins, Sterling Hughes · Embedded Linux Conference + OpenIoT Summit North America 2017
• 39mFirmware Management for MCUs: The Quark Bootloader ApproachDaniele Alessandrelli · Embedded Linux Conference + OpenIoT Summit North America 2017
• 42mwolfBoot: Open Source Secure Boot and Remote Firmware Updates in Safety-critical..Daniele Lacamera · Safety-Critical Software Summit @ Embedded Open Source Summit 2023
• 24mSecure and Encrypted Boot in Zephyr RTOSParthiban N · Open Source Summit Japan + AI_dev 2024