F28: encrypted reflashing in the field
TI’s F28 devices protect on-chip code from readback with the Code Security Module (CSM) on older parts, or the Dual Code Security Module (DCSM) on newer ones. What they do not provide is a built-in mechanism for securely reflashing an encrypted firmware image: to update code in the field, the security module normally has to be unlocked, which exposes the device and the firmware on its way onto the chip.
CodeSkin closes that gap. Our custom bootloaders, paired with a CodeSkin secure bootloader, let the CSM/DCSM remain locked at all times, even during reflashing. The firmware is transmitted to the target as an AES-encrypted image, and the secure bootloader decrypts it on the device. The plaintext code never leaves the chip and never travels over the programming link.
The application code is encrypted when the ehx file is generated, so your IP stays protected while still allowing reflashing equipment to be used in the field by customers or service personnel.
F29 secure bootloaders
CodeSkin also provides secure bootloader solutions for the new TI F29 family. The F29 adds a certificate-based security model with a hardware root of trust, and our bootloaders integrate with it so you can deploy signed, encrypted firmware updates in the field. See F29 Security Made Simple with C2Prog for how the F29 security model works and how C2Prog handles the certificates and signing for you.
Need a secure loader for an F28 or F29 design? Email us at info@codeskin.com.