🔒 1. Mandatory ASK (Application Secret Key) Protection
Per system security policy, 100% of production and update firmware images are encrypted via AES-128-CBC + HMAC-SHA256 authenticated packaging (using Firmware/tools/firmware_encryptor.py). Plaintext firmware binaries are never broadcast over the air.
📲 2. Direct In-Field Smartphone BLE OTA Flasher (Task ID: SW-OTA-01)
This engine allows anglers, guides, and field technicians to wirelessly flash or update firmware onto the NymphNode capsule directly from their smartphone app over Bluetooth Low Energy while streamside.
- Protocol: Dialog/Renesas DA14531 SUOTA Primary Service (
0xFEF5).
- Memory Architecture: Dual-Bank SPI Flash partitioning (Bank A & Bank B) with automated CRC rollback protection.
- Status: Active Engineering Directive. Direct in-app BLE flashing is logged in
Action_Items_and_Milestones.md for the next development sprint.
✅ Requirement Formally Logged: Documented in Action_Items_and_Milestones.md (Tasks FW-SEC-01, FW-OTA-01, SW-OTA-01) and tomorrow's operational checklist.