Secure firmware updates with code signing | Interrupt

Thanks for your reply. This was very helpful! A couple of questions
1 - In your experience is encryption not usually necessary for firmware downloads? Is authentication usually sufficient?
2 - If firmware needs to be encrypted, do you encrypt it on the fly during download using a key specific to each device?

Thanks.
Andrew