Skip to content

v1.20.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Jun 12:46
· 16 commits to main since this release
v1.20.0
7c4534a

v1.20.0

Hardened over-the-air (OTA) firmware updates

OTA firmware updates are now protected with asymmetric ECDSA P-256 signatures instead of a shared symmetric key. The private signing key never ships on devices or inside firmware images — only the public key is embedded — so an extracted or leaked firmware image can no longer be used to forge updates for other devices.

  • Companion app: the PAM socket relay now accepts the new 128-byte v2 (ECDSA) OTA header, alongside the legacy 96-byte format used to bring existing devices onto the new scheme.
  • Verified against flash, not the decrypted stream: firmware integrity is now checked by reading the image back from flash after it is written, so a silent flash-write failure can no longer be accepted as a valid update (brick prevention).
  • Anti-downgrade: devices on the new firmware reject legacy symmetric-key update packages.
  • Anti-rollback: a monotonic security-version floor blocks installing older firmware with known issues.
  • Reliability fixes across the on-device verify/install path (watchdog handling during signature verification, correct key/signature byte order, and a deferred post-verify flash commit).

Full Changelog: v1.20.0-beta.1...v1.20.0

Assets 3
Loading