wolfBoot is a portable secure bootloader solution that offers firmware authentication and firmware update mechanisms. Due to its minimalistic design and tiny HAL API, wolfBoot is completely independent from any OS or bare-metal application.
wolfBoot can be easily ported and integrated in existing embedded software projects to provide a secure firmware update mechanism. Upon installing a verified update, wolfBoot creates a backup copy of the last firmware image known to work correctly. If the new version is not confirmed by the application, or if the image installed is somehow corrupted, the bootloader will restore the state of the system before the most recent update.
Features:
- OS-agnostic, can run along side RTOS, Linux or bare-metal application
- Supports ARM TrustZone-M, can operate in both Secure and Normal world
- Multi-slot partitioning of the flash device
- Integrity verification of the firmware image(s)
- Authenticity verification of the firmware image(s)
- Digital signature algorithms (ECDSA SECP256R1/Ed25519/RSA 2048/4096)
- Hash algorithms (SHA-256, SHA-3-384)
- Minimalist hardware abstraction layer (HAL) interface to facilitate portability across different vendors/MCUs
- Copy/swap images from secondary slots into the primary slots to consent firmware update operations
- In-place chain-loading of the firmware image in the primary slot
- Hardware Security Modules support, including TPM 2.0 modules
- Tested on STM32 with Infineon TPM2.0 9670 module
- Measured boot using TPM 2.0 is supported
- Tested on ST33 and STSAFE
- Support for external (e.g. SPI) flash for update/swap
- Anti-rollback protection via version number
- Support for updating the bootloader itself
- Support for encrypted firmware images
- Support for hardware-assisted signature verification:
- STM32 PKA (e.g. STM32WB55)
- Contains key tools and image signing tools written in Python and C
- Includes wolfBoot test applications
- Secure key storage
- UEFI support
Supported Devices | STM32,STSAFE-A110 |
Software Function | Secure |
Middleware | Bootloader |
Deliverable | Source |
License Type | Commercial with free trial version |
Site |
ST Products |
---|
Served Countries:
Worldwide