MCUboot: Multi-Image Support
summary
MCUboot is a tiny (fits ~16KB) bootloader for microcontrollers that implements two flash slots plus a scratch area, validates images with SHA‑256 and RSA/ECDSA signatures, and performs execute-in-place or RAM-copy boots with either overwrite or swap-based atomic upgrades and revert. The project prototypes per-image TLV manifests but proposes manifest signing (manifest contains hashes for multiple images) and aligns with IETF SUIT/COSE/CBOR work; Zephyr and Trusted Firmware‑M integrations exist and external‑flash encryption is underway.
AI-written summary · about
chapters (13)
- 0:00Start
- 1:43MCUboot memory map
- 4:21MCUboot Current Features
- 7:03Non-XIP reality
- 8:45Multi-image
- 9:00Multiple CPUs
- 11:22Trusted Execution
- 16:40Multi-manifest dependencies
- 19:22Detached manifest
- 21:22What is signed?
- 22:28Sign the manifest
- 25:38COSE SUIT
- 27:52MCUboot plans
related talks
24mIntroduction to MCUboot: Secure Bootloader and Easy Firmware Updates
46mEnhancing System Security by Integrating Zephyr Bootloader and MCUboot
01h 03mTrusted Firmware M : Trusted Boot
21mSecure and Encrypted Boot in Zephyr RTOS
24mSecure and Encrypted Boot in Zephyr RTOS
42mApache Mynewt Bootloader for Reliable and Secure Firmware Upgrades
38mBoot to Cloud Security Considerations with IoT
39mSecuring firmware: Secure and Trusted boot in OpenBMC