Hi Telink Team,
We are a company developing Zigbee products based on the TLSR8258 MCU and are trying to implement the hardware security features (secure boot and firmware encryption).
We have read the available documentation, including this section on firmware encryption:
The TLSR8258F512 supports multiple firmware encryption methods to achieve the anti-cloning protection, including:
This gives us a good overview, but unfortunately there are no examples, workflows, or SDK references that show how to actually implement these features.
Could you please clarify:
How to enable secure boot on the TLSR8258?
The process/tools for key generation, encryption, and burning (e.g., through programmer or SDK).
If there are any example projects or application notes available to demonstrate these security mechanisms.
We want to make sure our Zigbee products are using the hardware security features properly, but at the moment we’re stuck without practical implementation details.
Any guidance, documentation, or sample code would be greatly appreciated!
Thanks in advance.
Hi,
8258 does not support firmware hardware encryption,
but we provide a simple firmware authentication method firmwareCheckWithUID()
that utilizes the chip's UUID and pre configured key.
This method can also prevent firmware from being copied.
There is a function firmwareCheckWithUID() in the sampleGW demo that may be helpful to you.
The general steps are as follows,
1. Obtain the unique code UUID of the chip
2. Calculate a string of keys (authorization code) in advance using your algorithm (such as hash ...) with the unique code UUID of the chip,
and pre write the keys to a certain address in Flash (such as CFG_FIRMWARE_ENCRYPTION in demo)
3. Check authorization code at startup
关注公众号
沪公网安备31011502403548号
发表于 2025-9-28 20:13:00
发表于 2025-9-29 14:47:41