mysbootloader with MY_SIGINING_SIMPLE_PASSWD

[zen85]

i do not find any information on where and how to set the MY_SIGINING_SIMPLE_PASSWD in the bootloader so i can compile one that works with this feature. the docs just say it is able to do signing since 1.3 - but i guess setting a password would now work for firmware updates for example?

[tekka]

@zen85 This feature is currently not supported in MYSBootloader.

[zen85]

@tekka
thanks for the answer... is the term 'currently' an indicator that this might change anytime? i would love to be able to do fota and have at least basic security....

[mfalkvidd]

@zen85 MySensors is open source. Anything is possible, if someone builds it

[zen85]

@mfalkvidd said in mysbootloader with MY_SIGINING_SIMPLE_PASSWD:

@zen85 MySensors is open source. Anything is possible, if someone builds it

i am thinking about digging into this since this is the only thing missing i would love seeing. i really want the network secured with a password to be safe. i guess the main limitation is the size of the bootloader and therefor it has to be extremly clever... am i right?

or are there other options i am not thinking about to make my network a bit secure?

[zen85]

can someone tell me if
#define MY_ENCRYPTION_SIMPLE_PASSWD "mypassword" would work with mysbootloader?

[Anticimex]

@zen85 I do not think so as the simple flags are software based and the size available for the bootloader is very limited. And I do not think the bootloader shares library code base with the MySensors functionality in general so some hacking will be involved to make it theoretically supported and extensive optimization to make it practically supported.

[zen85]

@anticimex
i thought so since using #define MY_ENCRYPTION_SIMPLE_PASSWD does not do any of the signing stuff but still works fine. it seems way simpler. i just hoped that would solve my issue... i tried messing with the bootloader but i did not get anywhere so far.

[Anticimex]

@zen85 I think @tekka implemented some security functionality in his bootloader but I believe it relies on a personalized atsha204a due to size limitations. And does not support encryption. But I might be out of date on that topic.