Method and system for providing an update of code on a memory-constrained device

A verifying entity for providing a code update, the verifying entity comprising a processor and a non-transitory memory having instructions stored thereon, wherein the instructions, when executed by the processor, facilitate:

• determining a minimum necessary compressed code space (MNCCS) of the code update;
• dividing the code update into N chunks;
• encrypting the N chunks, wherein encrypting the N chunks includes outputting at least one intermediate ciphertext block of each encrypted chunk, wherein the at least one intermediate ciphertext block of each encrypted chunk is permuted and permutation reference information is generated;
• sending the encrypted chunks, the at least one intermediate ciphertext block of each encrypted chunk, and the permutation reference information to a memory-constrained device;
• receiving integrity information of the at least one intermediate ciphertext block of each encrypted chunk from the memory-constrained device;
• verifying integrity of the at least one intermediate ciphertext block of each encrypted chunk based on the integrity information;
• and
• in response to the integrity of the at least one intermediate ciphertext block of each encrypted chunk being verified, providing an encryption key to the memory-constrained device to facilitate the memory-constrained device decrypting the at least one intermediate ciphertext block of each encrypted chunk using the encryption key and implementing the code update.

A non-transitory computer-readable medium having instructions stored thereon, wherein the instructions, when executed, facilitate:

• determining a minimum necessary compressed code space (MNCCS) of a code update;
• dividing the code update into N chunks;
• encrypting the N chunks, wherein encrypting the N chunks includes outputting at least one intermediate ciphertext block of each encrypted chunk, wherein the at least one intermediate ciphertext block of each encrypted chunk is permuted and permutation reference information is generated;
• sending the encrypted chunks, the at least one intermediate ciphertext block of each encrypted chunk, and the permutation reference information to a memory-constrained device;
• receiving integrity information of the at least one intermediate ciphertext block of each encrypted chunk from the memory-constrained device;
• verifying integrity of the at least one intermediate ciphertext block of each encrypted chunk based on the integrity information;
• and
• in response to the integrity of the at least one intermediate ciphertext block of each encrypted chunk being verified, providing an encryption key to the memory-constrained device to facilitate the memory-constrained device decrypting the at least one intermediate ciphertext block of each encrypted chunk using the encryption key and implementing the code update.