SPSDK 2.4.0

New features

• el2go-host:
  • implement parallel download of Secure Objects using database
  • speed up repeated calls to EL2GO server
  • allow to specify scope of Secure Objects to download
• nxpdebugmbox:
  • support halt, resume commands
  • AHB access test address remove as an option and move into database
  • support for block memory transfer over debug probes
• nxpmemcfg:
  • add support for RT700

Bugfixes

• el2go-host:
  • fix memory buffer used for data exchange for KW45
• nxpimage:
  • allow to parse AHAB image with empty image hash for rt118x

SPSDK 2.3.0

New features

• blhost:
  • support nIRQ pin feature
• el2go* host:
  • unify subcommands for RW61x
  • add get* otp* binary command
  • addd UUID harvesting
  • add default handler to unknown errors while assigning device to a group
  • add checker for max amount of Secure Objects and their size
  • add Remote Database for Secure Objects for Azurewave
  • add close_device to blhost; display response of RW TPFW responses
  • implement database storage for UUIDs harvesting
  • erase CMPA in EdgeLock2GO indirect flow
• lpcprog:
  • add programmer for LPC8xx parts
• nxpcrypto:
  • add subcommand for creating PKI tree
• nxpdebugmbox:
  • support for MX95 revision A0/A1/B0 (PQC support)
• nxpdevhsm:
  • add execute command for mcxn9xx
  • allow SB files without loading the wrapped CUST_MK_SK
  • implement oem duk certificate provisioning
• nxpdice:
  • add nxpdice application
• nxpele:
  • support nxpele over fastboot
• nxpimage:
  • support AHAB version 2
  • add verificator to bootable image
  • support linux image in bootable image
  • add ahab sign command for signing existing AHAB images
• nxpmemcfg:
  • add blhost* script option for exporting configuration for secure address
• nxpuuu:
  • new tool based on the UUU (Universal Update Utility), add capability to deploy images to i.MX MPU targets
• nxpwpc:
  • add special handler when pre* CSR are are empty
• tphost/tpconfig:
  • implement lightweight Chain* of* Trust checker for DevCert located in the device
• support MCXC series (blhost)
• support RT7xx
• support MNCXN23x, MCXN9xx, KW45xx EL2Go
• support MCXW71 and its wariants

Bugfixes

• el2go* host:
  • fix general error when database has no blob
  • fix revision in configuration
• nxpdebugmbox:
  • fix get* crp command for mcxa series
  • fix template for famode* image
  • fix dat for RT1180
  • fix template for RT1180
• nxpele:
  • fix get* info details
• nxpimage:
  • fix flag in AHAB
  • fix plain MBI for NHS52sxx
  • fix trustzone for NHS52Sxx
  • remove header form XMCD segment
• pfr:
  • fix erase* cmpa for mcxa series
• shadowregs:
  • fix fuses* script
  • fix loading shadow registers on RW61x

SPSDK 2.2.1

Bugfixes

• ifr:
  • fix read command
• nxpimage:
  • fix parsing bootable image without specified memory type
  • fix plain mbi for NHS52sxx
• nxpwpc:
  • fix unavailable item

Release 2.2.0

New features

• blhost:
  • add can interface
• EL2GO:
  • support for mwct2x12, mwct2xd2
• ifr:
  • add option to configure sector 2
• nxpdebugmbox:
  • add family and revision info into DAC config file
• nxpdevhsm:
  • commands limited based on specific devices capabilities
• nxpele:
  • add fuses script
• nxpimage:
  • add support for RAW image
  • add re-sign subcommand to ahab
  • support parsing FCB block with swapped bytes
  • support MBI CRC for mwct2x12, mwct2xd2, mc56f818xx, mc56f817xx
  • support BinaryImage in MBI export
  • support i.MX 95 unsigned build image
• nxpwpc:
  • add correlation-id into REST request
• drop support for Python 3.8
• support NHS52Sxx, mcxw71xx
• support RW61x EL2Go
• P&E Micro and J-Link as separate plugins
• all options in sub-commands case-insensitive

Bugfixes

• nxpdebugmbox:
  • fix debug authentication on NHS52Sxx
  • fix generation of DC config file
  • fix dac response length on kw45xx
• nxpele:
  • fix timeout
  • fix verify image for i.mx93
  • fix failure in communication with uboot
• nxpimage:
  • fix signed-msg incorrect signature
  • fix wrong offset in FCB
  • fix xmcd generation
  • fix mbi export
  • fix ahab with invalid SRK
  • fix bootable-image for RW61x
  • fix mbi config for kw45xx
  • fix bootable-image with dynamic offset segments
  • fix inconsistent core ID in parser and export
• pfr_:
  • fix generate-binary argument position
  • fix generating cmpa template for mcxa1xx
  • fix default cmpa page for mcxa1xx
• shadowregs:
  • fix shadow registers on RW61x
  • fix loadconfig command

SPSDK 2.1.1

New features

• nxpcrypto:
  • add RSA-PSS support
• nxpdevhsm:
  • support external devhsm provisioning

Bugfixes

• dk6prog:
  • fix DK6 operations
• nxpdevhsm:
  • fix buffer address MC56
• nxpele:
  • fix write fuse
• nxpimage:
  • add advanced params setting to configurations (padding, keys, timestamp, etc.)
  • fix manifest hash digest KW45/K32W1

SPSDK 2.1.0

New features

• nxpcrypto:
  • add signing commands (create, verify)
• nxpdebugmbox:
  • add subcommands for Fault Analysis Mode (export, parse, get-templates)
  • add printing the result of auth command
  • add dedicated plugin system
• nxpele:
  • U-BOOT interface
  • add commit command
  • add commands related to release-container
• nxpimage:
  • enable IEE encryption for RT1180
  • add key exchange signed message
  • add signature provider for RT1xxx
• support mcxn23x
• deployment of new database
• EL2GO mockup for S32K WPC
• introduce memory configuration tool

Bugfixes

• nxpele:
  • fix get-trng state command
• nxpimage:
  • fix cmpa template
  • fix parsing ahab image for i.MX95
  • fix xmcd export command
  • fix certificate block as binary file
  • fix sb21 get-template command
• nxpmemcfg:
  • fix export command
• pfr:
  • fix pfr generate command
• shadowregs:
  • fix default family parameter

SPSDK 2.0.1

Bugfixes

• nxpdebugmbox:
  • fix test memory AP address
• nxpele:
  • remove temporary file
• nxpimage:
  • Fix detection of input file for FCB in bootable image
  • fix IEE encryption for RT1180
  • fix signed MBI for Anguilla Nano
  • fix SB21 export with yaml config
• shadowregs:
  • fix behavior of the RKTH registers
  • fix invalid names of CRC field in database
• fix setting a register value as raw value when loading from configuration

SPSDK 2.0.0

New features

• blhost:
  • dedicated plugin system
  • check of written data length in USB Interface
• nxpcrypto:
  • remove dependency on PyCryptodome
  • add rot command for calculating RoT hash
• nxpimage:
  • distinguish between fw version and image version
  • support YAML configuration for HAB
  • support build RT11xx image with ECC keys
  • support OSCCA
  • support AHAB NAND
  • implement HTTP Proxy Signature Provider
  • signature provider for OSCCA
  • add validation of signature in AHAB
  • support OTFAD for RT1010
  • export HAB from yaml config in bootable image
  • revision of offsets in AHAB container
  • command filter in SB 2.1 based on family
  • refactor memory types for mbi
  • add to AHAB key identifier for encrypted images
• pfr/ifr:
  • remove devices subcommand
• sdpshost:
  • connection support for iMX91 and iMX95
• shadowregs:
  • unify endianness
• tool for converting JSON configuration into YAML with comments
• support mcxa1xx
• unify naming: RKTH/RKHT
• remove nxpkeygen and nxpcertgen apps, replaced by nxpcrypto
• remove elftosb app, replaced by nxpcrypto
• positional arguments replaced by options for all parameters with an exception to blhost, sdphost and dk6prog
• remove backward compatibility with command get-cfg-template, replaced fully with get-template(s)
• unify family name within all modules
• remove lpc55xx from family names

Bugfixes

• blhost:
  • fix error of SPI connection
• nxpdevhsm:
  • add missing sdio in generate command
• nxpele:
  • fix generate-keyblob IEE
  • fix issue with get-info command
• nxpimage:
  • fix certificate block in AHAB
  • fix signature in AHAB
  • fix some commands for SB21
  • fix non generated keys for AHAB parse
  • fix RAM images for LPC55Sxx
  • fix MBI signed for xip for MCXN9xx
  • fix sb21 export yaml errors
  • fix OTFAD with DUK
  • fix wrong core ID in parse for iMX93
  • fix binary certificate block for MBI
  • fix manifest for mcxn9xx
  • fix bootable image merge
  • fix in MBI configurations
  • fix missing parameters in MBI config in bootable-image parse
  • fix sb21 file generation without SBKEK
  • update list of supported MBI images for mcxn9xx

SPSDK 1.11.0

ANNOUNCEMENT:

Next version of spsdk (2.0) will introduce breaking changes:

• elftosb will be replaced by nxpimage
• nxpcertgen and nxpkeygen will be replaced by nxpcrypto
• select appropriate family will be done using: -f/--family parameter
• move towards options for all parameters with an exception to BLHost
• removal of crypto backends
• extend dedicated spsdk.crypto module - serve as the de-facto backend of SPSDK
• module level imports via init files

New features

• nxpimage:
  • enable signature providers for AHAB image and signed messages
  • add support for rt104x in bootable-image
• tphost/tpconfig:
  • add possibility to check TP_RESPONSE only with NXP_PROD raw binary key
• add support for mcxn9xx
• add API for FuseLockedStatus
• possibility to declare private keys with passphrase in signature provider config
• add checking of written data length in usb interface
• add support for dk6 tools

Bugfixes

• nxpimage:
  • fix offset on NAND memory in AHAB image
• fix plugin error for signature Provider for sb21

SPSDK 1.10.1

New features

• nxpimage:
  • support encrypted image hab
  • support for RT11xx and RT10xx
  • improve OTFAD/IEE names generation
• add API to retrieve info about fuses

Bugfixes

• nxpimage:
  • fix XMCD load_from_config
  • fix IEE template
• fix circular dependency in signature provider import
• fix issue with loading keys as INT
• not enable logging when spsdk is used as a library