Secure boot and firmware updates (OTA) in IOT Protocols - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to verify the firmware signature before booting.

IOT Protocols

if verify_signature(firmware, [1]):
    boot(firmware)

Drag options to blanks, or click blank then click option'

Apublic_key

Bprivate_key

Cfirmware_hash

Dencryption_key

Attempts:

3 left

💡 Hint

Common Mistakes

Using the private key to verify the signature instead of the public key.

The public key is used to verify the digital signature of the firmware to ensure it is authentic before booting.

2fill in blank

medium

Complete the code to start the OTA update process securely.

IOT Protocols

ota_update.start_secure_update([1])

Drag options to blanks, or click blank then click option'

Aupdate_url

Bunencrypted_firmware

Cfirmware_version

Dsigned_firmware

Attempts:

3 left

💡 Hint

Common Mistakes

Starting update with unencrypted or unsigned firmware.

The OTA update should start with signed firmware to ensure the update is authentic and secure.

3fill in blank

hard

Fix the error in the code that checks firmware integrity using a hash.

IOT Protocols

if firmware_hash == [1](firmware).hexdigest():
    accept_update()

Drag options to blanks, or click blank then click option'

Asign

Bdecrypt

Chashlib.sha256

Dencrypt

Attempts:

3 left

💡 Hint

Common Mistakes

Using encrypt or decrypt functions instead of hashing.

Using hashlib.sha256 computes the hash of the firmware to compare with the expected hash for integrity check.

4fill in blank

hard

Fill both blanks to create a dictionary comprehension that maps firmware versions to their hashes for verification.

IOT Protocols

version_hashes = {version: [1] for version in firmware_versions if version [2] '1.0.0'}

Drag options to blanks, or click blank then click option'

Aget_hash(version)

B>

C==

D<

Attempts:

3 left

💡 Hint

Common Mistakes

Using equality instead of greater than for filtering versions.

The comprehension maps each version to its hash using get_hash(version), filtering versions greater than '1.0.0'.

5fill in blank

hard

Fill all three blanks to create a secure OTA update check that verifies signature, version, and hash.

IOT Protocols

if verify_signature(firmware, [1]) and firmware_version [2] current_version and firmware_hash [3] expected_hash:
    apply_update(firmware)

Drag options to blanks, or click blank then click option'

Apublic_key

B>

C==

Dprivate_key

Attempts:

3 left

💡 Hint

Common Mistakes

Using private key for verification, wrong comparison operators, or incorrect hash check.

The code verifies the firmware signature with the public key, checks the firmware version is newer, and confirms the hash matches before applying the update.