Secure Boot Support for Nordic nRF5340: Firmware Update for Dual-Core Systems
We’re thrilled to announce that wolfBoot now supports the powerful Nordic nRF5340 dual-core SoC, bringing enterprise-grade security to your IoT applications. This cutting-edge microcontroller combines robust security features with high performance, making it an ideal choice for modern IoT deployments.
Key Features
Dual-Core Architecture Application Core: Cortex-M33 at 128MHz with TrustZone 1MB Flash and 512KB RAM Network Core: Cortex-M33 at 64MHz 256KB Flash and 64KB RAM wolfBoot Signature Options RSA (2048/3072/4096) ECC (256/384/521) ED25519/ED448 PQC: ML-DSA/LMS/XMSS Hybrid PQC schemes Hardware based root of trustImplementation Details
Our reference implementation uses the Nordic nRF5340-DK development kit with external QSPI flash for secure update storage. We’ve also enabled delta (differential) updates to optimize bandwidth usage on constrained networks. Simply enable this feature with DELTA_UPDATES=1.
Communication Setup
The DK board features two virtual COM ports for debugging:
Application Core: UART0=P0.20 Network Core: UART0=P1.01The application core manages network core updates through IPC and shared memory, ensuring seamless coordination between both cores.
Getting Started
For detailed build instructions and example output from an update, visit our documentation.
Important Notes
Network core updates must be signed with –id 2 and placed in the application core update partition Coming soon: Hardware-based root of trust using the UICR key storage regionTesting Tools
We’ve provided helpful testing scripts in our GitHub repository. The build_flash.sh script automates the process of:
Creating internal and external flash images Signing each with version 2 Placing updates in external flash Triggering updates (equivalent to calling wolfBoot_update_trigger())Support
For questions or assistance, please contact us at facts@wolfSSL.com or call us at +1 425 245 8247.
Download wolfSSL Now