Bootloader firmware validation

The bootloader firmware validation library provides the function that the nRF Secure Immutable Bootloader uses to validate a firmware image before booting it.

The API is public because applications that are booted by the immutable bootloader can call the function from this library using the bootloader’s code, through external APIs. See External APIs for more information. Using this mechanism can be useful when the application receives a DFU package and wants to determine whether it will be accepted by the bootloader.

Validation

The bl_validate_firmware() function validates the following information:

• The digest and the signature of the whole image (see bl_root_of_trust_verify())

• The fields of the fw_info struct that is part of the firmware image (see Firmware information)

API documentation

Header file: include/bl_validation.h

Source files: subsys/bootloader/bl_validation/

Bootloader firmware validation