STM32 MCUs Security

Hi there..It will great to have a walk through about porting the SBSFU on a custom boards!!!I followed the instructions in the "Getting Started with SBSFU....." AppNote, but it's not working. I will highly appreciate you for any help.ThanksJitu

Dear st team,  I have a development issue when running TFM example application at STM32L562.After download the tfm_s_enc_sign.bin through ymodem,print error log"[ERR] Image in the secondary slot is not valid!" when secure boot .ALL other 3 bin（tfm_s_sign.bin，tfm_ns_sign.bin，tfm_ns_enc_sign.bin） download success.    I follow the document UM2671 chapter 11.4 Download a new firmware image.    The project is en.stm32cubel5_v1-3-0.zip，file：Projects\STM32L562E-DK\Applications\TFMSteps to reproduce:1.run Projects\STM32L562E-DK\Applications\TFM\TFM_SBSFU_Boot\MDK-ARM\regression.bat to init device2.build TFM_SBSFU_Boot application，TFM_Appli secure application，TFM_Appli non-secure application，Build TFM_Loader application3.run Projects\STM32L562E-DK\Applications\TFM\TFM_SBSFU_Boot\MDK-ARM\TFM_UPDATE.bat to programing into STM32L5 internal and external Flash memory4.success to run into app5.press user button (blue) during board

When the files are accessed. Some of the symbols are not resolved and shows up as errors, however the project compiles fine. Has anyone else come across this issue?

Hello, On my setup impossible to run the 2 scripts auto-detecting the COMPORT of the current plugged board. Wrong COMPORT is returned and the Teraterm macro crash.I've patched the original scripts to ask you for the COMPORT. Modified files StartTTPL4.bat and StartTTPL5.bat are here: https://github.com/Phil242/STM32-Security-Workshop You need to drop them in folder C :\STM32SecuWS\Tools\teraterm and that's it.Regards,Philippe

I'm registered at the workshop which will take place on 12th of November but I still didn't received any boards, is there a tacking number available or how can I find out if my parcel is still on the way?

Hi -I had been working on getting FUS support for upgrading images integrated into our firmware, and I discovered that my initialization of the CRC peripheral was causing the FUS subsystem to reject all upgrade attempts. I couldn't find any documentation inside AN5185 that indicated that the CRC peripheral was used for the FUS services, but could I get confirmation that it is indeed being used by FUS?I can get FUS to succeed by resetting the CRC peripheral in my code before invoking (thus deinitializing the CRC peripheral) a FUS upgrade attempt.If this is indeed the case that it requires the CRC peripheral, please update AN5185's table 3 "FUS resources usage".Thanks,Tim

I have not received the confirmation link and also not received the participation link. Please send me the participation link.

Customizing the Cloud application from the STM32CubeExpansion_Cloud_AWS_V1.4.1causes the following link errors, where line 1 is the CubeIde generated linker command:I haven't change anything in the configuration. Just added codeAttached is the linker script that is being used and is part of the original example.How do I maximize the amount of RAM available for the application.If the STM32F769 is too small (which I can't imagine) What is the next mcu I can use ?I don't care about memory protection and other advanced options(MPU etc.).arm-none-eabi-gcc -z max-page-size=0x200 -o "STM32F769I-Discovery_AWS.elf" @"objects.list" -l:se_interface_app.o -mcpu=cortex-m7 -T"../STM32F769NIHx_FLASH.ld" --specs=nosys.specs -Wl,-Map="STM32F769I-Discovery_AWS.map" -Wl,--gc-sections -static -L../../../../../BootLoader_OSC/2_Images_SBSFU/SW4STM32/STM32F769I_Discovery_2_Images_SBSFU/Debug -Xlinker -L../../../../../BootLoader_OSC/Linker_Common/SW4STM32 --specs=nano.specs -mfpu=fpv5-d16 -mfloat-abi=hard -mt

Greetings,Since I am on Linux and still wanted to do the hands-on parts of the workshop and the homework, I rewrote the provided Windows batch files as shell scripts. Couldn't really test all of them, but they're straightforward enough, and at least the ones needed for the homework did work just fine.The only batch I could not rewrite was 03_01_Postbuild_SimpleApp_WithWeakness.bat, which is identical to 02_01_...bat except that it calls a Windows executable to (likely) patch the generated firmware image.What exactly does patch_bin.exe do?Cheers, Goetz

In an Project, I'm using Jump to boot Function to jump to STM32 Factory Bootloader, so that i can able to load new firmware from USB via “STM32 Cube Programmer�? CLI Method (from our own system application).It is working fine when Read Out Protection is Not enabled (Level is 0)Once Read out protection is enabled (Level is 1), instead of Jump to Bootloader microcontroller is restarting. Microcontroller used is STM32F407VE.I have attached the jump to boot coding for your reference

Hi!I'm talking here about script "StartTTPL4.bat".I've removed "rem" before "pause" word at the end to see results of the script.Results are: "Error! No Com port available !"But I'm sute that it's available, because I can select it manually in teraterm and see in device manager (COM4 in my case).Can I fix the script somehow to make it work automatically, how it should be?What data do you need to help me with that?I'm not strong enough in windows bash scripting.There's full script log if I'll remove "rem" before "echo on" at the start.C:\STM32SecuWS\Tools\teraterm>SET DIR_MYSCRIPT=C:\STM32SecuWS\Tools\teraterm\   C:\STM32SecuWS\Tools\teraterm>call :getport COMPORT   C:\STM32SecuWS\Tools\teraterm>FOR /F "tokens=4 USEBACKQ" %F IN (`mode | find " COM"`) DO ( echo %F if %F NEQ CON: SET COMPORT=%F )   C:\STM32SecuWS\Tools\teraterm>echo Return : COMPORT Return : COMPORT   C:\STM32SecuWS\Tools\teraterm>rem GOTO :EOF   C:\STM32SecuWS\Tools\teraterm>GO

..

I need to receive SPI data from STM32G474RE master A to STM32G474RE slave B with DMA and CRC feature. DMA works in normal mode both on master and slave, which triggered by timer 2 on master A. The structure of the data frame is ADC1(16bit)+ADC2(16bit)+ADC3(16bit)+CRC(16bit). But CRCERR comes never even if the transmission is corrupted. How would I do this?codes on master A below:uint16_t SPI1_TX_BUFF[3] = { 0 };  #define SPI1TxBufferSize 3 void spi1_init(void) { LL_SPI_InitTypeDef SPI_InitStruct = { 0 };   LL_GPIO_InitTypeDef GPIO_InitStruct = { 0 };   /* Peripheral clock enable */ LL_APB2_GRP1_EnableClock(LL_APB2_GRP1_PERIPH_SPI1);   LL_AHB2_GRP1_EnableClock(LL_AHB2_GRP1_PERIPH_GPIOA); LL_AHB2_GRP1_EnableClock(LL_AHB2_GRP1_PERIPH_GPIOB); /**SPI1 GPIO Configuration PA15 ------> SPI1_NSS PB3 ------> SPI1_SCK PB4 ------> SPI1_MISO PB5 ------> SPI1_MOSI */ GPIO_InitStruct.Pin = LL_GPIO_PIN_15; GPIO_InitStruct.Mode = LL_GPIO_MODE_ALTERNATE

I applied for 4th November session. To my knowledge, there was still no package received from ST to my address. Can you please confirm the shipment.Tnx & All the best, Mile

When it does not open any window, as it is mentioned in TFM_Homework.pdf, what can I do instead to know the board (STM32L5) is ready for "STM32 Security Workshop PSA-TFM"?I didn't see the windows in the attachments.

Hi, I have used STM32H750VB IC and have done SHA256 conversion of a given data using an inbuilt functionHAL_HASHEx_SHA256_Start(&hhash,(uint8_t*)'A',sizeof('A'),(uint8_t*)aSHA256Digest,200);HAL_HASHEx_SHA256_Finish(&hhash,(uint8_t*)aSHA256Digest,200);where A is the secret key for sha 256 uint8_t aSHA256Digest[32];the output obtained from serial monitor is :0xE0 0x3D 0x13 0xB9 0xF8 0xEE 0xE3 0xF1 0xFF 0x94 0x5E 0x8F 0x0A 0x20 0x75 0x6B 0x1A 0x02 0x6C 0xAC 0x50 0x79 0xC4 0x09 0xE6 0x46 0x8F 0x5C 0x40 0xCD 0x35 0x09 The output from internet is :( https://www.freeformatter.com/hmac-generator.html#ad-output)ff333794c5afd126a4e75aef1a35595a846e9e1d4053017d78d7aa3d8373182awhich do not match. Can anyone suggest me a solution?

Hello, I would like to set the RDP LEVEL for my stm32l0 MCU without using ST link utility software, to be more specific, how I can set the level in the firmware to be flashed in which area ? and is it possible to add a script to linker to set the RDP level without changing the code? Please advice.Thanks.

..

Can you please re-confirm my application? Thanks in advance

..

I have been away from my work email for a week and missed the confirmation, is it still possible to participate?

Hi! I'm in process of preparing for workshop and want to do two homework tasks, but have no required discovery boards. Is this a problem?I have personal custom PCBs with STM32F1 and STM32F4 series, can I use it for homework?Thanks!

Hello I am writing to express my complete disappointment regarding how the "sits" are assigned to the workshops, several times I have expressed interest in participating in the hands on (I'm a firmware developer) and in all cases the answer was a refusal due to lack of sits and in more than one case other people that I have sent the email prompting the workshopto, despite having signed up afterwards, were accepted. Given the treatment received, the temptation to switch to another brand is really strong​Best​ regardsGMG​

I protected the flash from code running on the MCU using HAL, but while trying to unprotect it using STM32CubeProgrammer the board could not be unprotected ("Expected value for Option Byte "RDP": 0xAA, found: 0xBB") and became unresponsive. After this, I can not even connect to the board anymore. I believe this is the second time this happens, the first time I thought it was a hardware problem, but this time luckily I was using verbose level 3 and got a log, that is attached.I have tried to power down the board completely, and also to connect using a JLink programmer, but it did not work.Surprisingly, I had no problems with a STM32WB55 MCU.Does anyone know anything about this problem?

Hi,Thanks for releasing the SBSFU version 2.4.0.Could you please let me know if it possible in this version to download the FW file to NOR flash.I would like to use NOR flash as Download slot. If it is possible, could you please give me an short overview on how can I achieve this.Thanks,Ankush