F28: encrypted reflashing in the field
TI’s F28 devices protect on-chip code from readback with the Code Security Module (CSM) on older parts, or the Dual Code Security Module (DCSM) on newer ones. What they do not provide is a built-in mechanism for securely reflashing an encrypted firmware image: to update code in the field, the security module normally has to be unlocked, which exposes the device and the firmware on its way onto the chip.
CodeSkin closes that gap. Our custom bootloaders, paired with a CodeSkin secure bootloader, let the CSM/DCSM remain locked at all times, even during reflashing. The firmware is transmitted to the target as an AES-encrypted image, and the secure bootloader decrypts it on the device. The plaintext code never leaves the chip and never travels over the programming link.
The application code is encrypted when the ehx file is generated, so your IP stays protected while still allowing reflashing equipment to be used in the field by customers or service personnel.
F29 secure bootloaders
CodeSkin also provides secure bootloader solutions for the new TI F29 family. The F29 adds a certificate-based security model with a hardware root of trust, and our bootloaders integrate with it so you can deploy signed, encrypted firmware updates in the field. See Setting Up Security on an F29x Device for the decisions an F29x device takes permanently, and how we help you get them right.
Need a secure loader for an F28 or F29 design? Email us at info@codeskin.com.