In-place image validation and decryption on a single slot

[DomBanger]

Hi everyone,

We are currently considering use of mcuboot for image validation and decryption with only a single flash slot in combination with our own first-stage bootloader, which is capable of receiving and storing new images, both during normal updates in the field and in rescue scenarios, so that we do not need mcuboot's two-slot strategy. Furthermore, we currently do not have sufficient flash memory available for two slots. Our idea is to use mcuboot only for validation of signed images (during the normal boot process) and to validate and decrypt new stored images once after an update was received with our bootloader. Everything should take place on the first slot in the flash memory, possibly with additional scratch memory for operation.

What is the experts' opinion of this project and the feasibility and usefulness of implementing it with mcuboot?

Thank you very much for your suggestions and assessments.