5.3 Checksum

Overview

Checksum verification is a method used to validate the integrity of the bytes present in a given memory range through a direct mathematical analysis. A memory range is given to a checksum function, where a special value, called a checksum, is calculated from the data present in the given memory range, and then that value is compared to the checksum calculated by the bootloader during the programming step. If both checksum values match, then there is a high probability the data has not been accidentally altered or corrupted. This method is only capable of detecting errors in transmission or storage and it is unable to perform authenticity checks on the data’s source.

Verification Flow

In Checksum verification, the bootloader has a very simple program flow for the verification steps. On a normal start-up, the bootloader will simply perform a checksum calculation on the program memory space and compare that value to the precalculated checksum that resides in the bootloader from the original calculation that occurs at the device programming step. On a device Reset, application space is first cleared. This will force a failure in the verification steps which is then caught by the bootloader. From there, the bootloader starts the device programming process and calculates the new checksum on the application hex file like a normal execution would. After the device programming has finished, the bootloader will calculate another checksum on the application memory space and compare that new value to the precalculated one from the programming step. If the checksum values match, it is verified that the data present in the program memory is the valid Hex file from the application code and the data’s integrity has not been compromised during transmission. This method is unable to perform source authenticity checks.