Skip to main content
RKher.1
Associate II
Nov 9, 2021 5:14 PM UTC
Solved

SBSFU and Firmware Encryption

I'm currently investigating SBSFU options for STM32 and it seems like the base package incorporates authentication of the firmware based on on digital signatures (ECDSA, edDSA etc.) but does not incorporate firmware encryption. I have an additional requirement to encrypt the firmware prior to flashing it to the device and then decrypting and authenticating the app image prior to execution. Is this possible through the base SBSFU package or does it require a custom extension/implementation? Thanks!

This topic has been closed for replies.
Bubbles
BubblesBest answer
ST Employee
Nov 10, 2021 12:04 PM UTC

Hello @RKher.1​ ,

normally the SBSFU example includes firmware encryption using AES.

Check AN5056 again for details. You can normally choose another cryptographic scheme (see figure 15 in the AN) or another cryptographic library.

BR,

J

To give better visibility on the answered topics, please click on Accept as Solution on the reply which solved your issue or answered your question.

2 replies

Bubbles
BubblesBest answer
ST Employee
Nov 10, 2021 12:04 PM UTC

Hello @RKher.1​ ,

normally the SBSFU example includes firmware encryption using AES.

Check AN5056 again for details. You can normally choose another cryptographic scheme (see figure 15 in the AN) or another cryptographic library.

BR,

J

To give better visibility on the answered topics, please click on Accept as Solution on the reply which solved your issue or answered your question.
RKher.1
RKher.1Author
Associate II
Nov 10, 2021 8:04 PM UTC

Thanks once again @JHOUD​