Tool/software:
Hi everyone,
We are working with SDK 10.0 and the AM2634 MCU. We have implemented a Secondary Bootloader (SBL) that needs to load an MCELF image (signed and encrypted) from flash. We have allocated two spaces in flash to store the MCELF so that, in case of an update, if the transferred image is corrupted, my SBL can still load the second one.
The functions we use in the SBL to validate the image are:
Bootloader_authStart()
Bootloader_authUpdate()
Bootloader_authFinish()
The issue we are encountering is as follows: if the first image I check does not have a valid signature (for example, it is corrupted or unsigned), when we check the second image, the SBL gets stuck in an endless loop.
We would like to know:
- What is the correct sequence of functions to call to verify if a second MCELF is correct after the first one fails?
- The validation functions also start the cores if the check is successful. Is it possible to check the correctness of an MCELF without starting it?
Thanks in advance for your help!
Alessandro