Secure device update by passing encryption and data together
A method and system for updating firmware of a device. A method includes receiving a decryption engine for decrypting encrypted firmware, loading the decryption engine into a first memory of a device, and receiving the encrypted firmware. The method may include obtaining a pre-stored encryption key from a second memory of the device, wherein the second memory is a different type of memory than the first memory, and decrypting the encrypted firmware using the encryption key and the decryption engine, wherein the decryption of the encrypted firmware occurs in the first memory.
1. A method of updating firmware of a device, the method comprising:
receiving in an update package an encrypted firmware and a decryption engine including a decryption algorithm for decrypting the encrypted firmware;
loading the decryption engine into a first memory of a device;
obtaining a pre-stored encryption key from a second memory of the device, wherein the second memory is a different type of memory than the first memory;
decrypting the encrypted firmware using the encryption key and the decryption engine, wherein the decryption of the encrypted firmware occurs in the first memory;
authenticating the decryption engine prior to receiving the encrypted firmware by comparing a digest stored in the device to a computed digest of the decryption engine;
wherein the authenticating comprises comparing, in the first memory, a first digest and a second digest, wherein the first digest is generated by a provider of the decryption algorithm, wherein the first digest is stored in the device and the first digest corresponds to the decryption algorithm and the second digest corresponds to an output of multiple XOR operations of selected bootloader code parts with the decryption algorithm.
2. The method of claim 1 , wherein the first memory is a random-access memory (RAM) and the second memory is a non-volatile memory (NVM).
3. The method of claim 1 , responsive to the authentication, executing the decryption engine to decrypt the encrypted firmware.
4. The method of claim 1 , further comprising implementing a second-encryption algorithm, wherein the second algorithm is different than the first algorithm.
5. The method of claim 1 , further comprising decrypting the encrypted firmware using the pre-stored key known only to the device and the manufacture.
6. The method of claim 5 , wherein the pre-stored key is programmed during manufacturing and is not transmitted over a network to be stored in the device.
7. The method of claim 1 , further comprising validating the decrypted encrypted firmware using cyclic redundancy check (CRC) prior to updating firmware in the second memory.
8. The method of claim 1 , wherein the device is a fire detector.
9. A system for updating firmware of a device, the device comprising:
a first memory of the device;
a second memory of the device configured with firmware, wherein the first memory is different than the second memory;
a processor, wherein the processor is configured to:
receive in an update package an encrypted firmware and a decryption engine including a decryption algorithm for decrypting the encrypted firmware;
load the decryption engine into the first memory of a device;
obtain a pre-stored encryption key from the second memory of the device, wherein the second memory is a different type of memory than the first memory; and
decrypting the encrypted firmware using the encryption key and the decryption engine, wherein the decryption of the encrypted firmware occurs in the first memory;
wherein the first memory is configured to authenticate the decryption engine prior to receiving the encrypted firmware by comparing a digest stored in the device to a computed digest of the decryption engine;
wherein the authentication comprises comparing, in the first memory, a first digest and a second digest, wherein the first digest is generated by a provider of the decryption algorithm, wherein the first digest is stored in the device and the first digest corresponds to the decryption algorithm and the second digest corresponds to an output of multiple XOR operations of selected bootloader code parts with the decryption algorithm.
10. The system of claim 9 , wherein the first memory is a random-access memory (RAM) and the second memory is a non-volatile memory (NVM).
11. The system of claim 9 , responsive to the authentication, executing the decryption engine to decrypt the encrypted firmware in the first memory.
12. The system of claim 9 , further comprising implementing a second-encryption algorithm, wherein the second algorithm is different than the first algorithm.
13. The system of claim 9 , wherein the first memory is configured to decrypt the encrypted firmware using the pre-stored key known only to the device and the manufacture.
14. The system of claim 13 , wherein the second memory stores the pre-stored key and is programmed during manufacturing.
15. The system of claim 9 , further comprising validating the decrypted encrypted firmware using cyclic redundancy check (CRC) prior to updating firmware in the second memory.
16. The system of claim 9 , wherein the device is a fire detector.