David Brown

Support X.509 certificates for verification

9

Allow MCUboot to support X.509 certificate chains instead of just single public/private key pairs. This would allow one or more root certs to be stored in MCUboot, and more flexibility...

This is a snapshot of my x509 work from last year. It doesn't merge, doesn't very that the signature matches the one in the cert, and possibly has numerous other...

zephyr: Add a bool Kconfig option for swap move

4

The Kconfig system used by Zephyr does not allow the defaults for choice options to be overridden. To compensate for this, create a new boolean config option that will determine...

Implement the Swap Hash algorithm

5

Pushing this early to get some review on the docs.

Add HSM support to imgtool

11

Add support for an HSM to imgtool so that the private keys can be managed, and don't have to live in the filesystem. This can be developed using softhsm. Derived...

Increase image-size sim test coverage

1

Currently, the simulator does not test that MCUboot properly handles images that are as large as possible. There are multiple things to consider here: - [ ] Writing sim code...

Mbed TLS RSA uses private fields

2

The RSA support in MCUboot that uses Mbed TLS makes use of private fields in the RSA data structures. This is not part of their public API, and will possibly...

SWD flashing slot 0 partially results in unwanted behavior

1

If, after performing upgrades through mcuboot (writing to slot 1, rebooting, etc), a hardware tool, such as SWD, or JTAG is used to write a new image to slot 0,...

`cargo test` with various features fails in mcuboot-sys

2

I discovered, while adding a top-level virtual Cargo.toml file, that `cargo test` fails to build in `mcuboot-sys` with some feature combinations. Some quick investigation more makes me wonder why this...

Implement static analysis of MCUboot `boot` code

1

Find a tool available for us to use that is able to perform static analysis and incorporate that into our CI process.