STM32F4xx Bootloader and Security

[alexandr]

Posted on June 15, 2013 at 13:18

I wrote my bootloader, that load application to the flash.

Now I want to set security. Is it enough to set RDP Level1 and write protection to sector0, where my bootloader is located? Or I need to set RDP to Level2? Thanks.

[Tesla DeLorean]

Posted on June 15, 2013 at 14:08

With security you need first hand experience of how the modes function, and how that impacts your ability factory program, test, update, and perform failure analysis. You're going to have to sacrifice a few parts to science as you verify the functionality you need, or discard a method as unworkable.

You'll also need to validate how well this protects your code, and understand the modes of attack, and the vulnerabilities. You'll want to discuss the requirements of manufacturing, test, technical support and QA  qroups.

[alexandr]

Posted on June 15, 2013 at 18:04 Clive, I just want to ask - what I shoud put in the option bytes (RDP, WRP) that nobody can read  the program from the flash memory with JTAG/SWD, even using boot0 pin. And of course, bootloader should have the rights to udpate this flash. Tnanks.