wolfBoot secure boot on Renesas RX now builds with the current GNU RX toolchains (GCC RX 8.3.0 and 14.2.0) against current wolfSSL, and ships a generic external watchdog hook plus continuous integration coverage for RX65N and RX72N.
- Builds with modern GNU RX compilers, in both little-endian and big-endian data modes, instead of only the old GNU RX 4.x release.
- New wolfBoot_watchdog_feed() hook, called from the hash and flash copy/erase loops when built with WATCHDOG. It is a weak no-op that a port overrides, so it compiles out entirely when unused. An RX reference driver toggles a WDI GPIO to service an external windowed watchdog, selected with WATCHDOG_WDI_PORT and WATCHDOG_WDI_PIN.
- CI jobs build the RX65N and RX72N example configurations on real GNU RX toolchains, so the port stays buildable.
wolfBoot support across Renesas is broad: RX65N and RX72N with TSIP hardware crypto, RA6M4 with SCE, and RZN2L with RSIP. Each can be built from the wolfBoot Makefiles or from e2studio, and key provisioning works with the Renesas Security Key Management Tool and the Renesas key wrap service. Ports for the RX71M, RX630, RX24T and SH7085 are on the way.
On every target, wolfBoot gives you measured and verified boot with ECDSA, RSA, Ed25519 or post-quantum ML-DSA and LMS signatures, A/B partition firmware updates with rollback, optional encrypted update partitions, and delta updates to keep the update image small.
Full details are in the pull request #832
Renesas documentation
If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
Download wolfSSL Now