STM32 MCUs Security

Add a binary header and a sbsfu segment to an elf file

I have a problem with merge SBSFU .elf file and application .elf.I prepared:SBSFU.elf - addresses in linker script: 0x08000000 - 0x08020000application.elf - 0x08020400 - 0x081FFFFFheader.bin - size: 1024BSo I suppose, that like in SBSFU example heade...

Resolved! Flash Secure Firmware from Linux host without Tera Term

I build SBSFU using X-CUBE extension for STM32F769I-DISCO. Flashed the "SBSFU_UserApp.bin" file using STM32CubeProgrammer. Now I need to send UserApp.sfb file via YMODEM without using Tera TermI used,stty -F /dev/ttyACM0 115200 sb UserApp.sfb >/dev/t...

STM32L4 readout protection RDP

Using STM32L452CC and STM32CubeProgrammer API v2.12.0 Windows 64-bits.Firstly, I'm setting the readout protection to its middle level (RDP = BB in the programmer) and then program the chip successfully. Then, letting the chip power cycle. Now reading...

Resolved! Accidental MCU/Flash write lock up: My misuse or CubeProg bug?

While programming OptionBytes or FW on STM32WLx5 most of the time is OK.In CubeProg I have noticed, that on some MCUs, when I get reading of RDP 0xFF or 0, the next action to program something write related, it could not be done and it's failed.Stati...

Resolved! Unable to execute my own application without TrustZone on STM32U5 (B-U585I-IOT02A) after executing SBSFU application example

Hi,I ran the SBSFU example of STM32CubeU5 following what is in the readme file without any problem. Then I disabled TrustZone but I cannot run the projects made with STM32CubeIDE, verification of the downloaded firmware fails. If I try to erase the f...

Resolved! How can i Disable Trustzone in stm32L5?

i am enable trust zone and I make one part as secure world and another part as a non secure world using (SECWM1, SECWM2) but forget to enable Dbank as (Dbank = 1) now I couldn't make any changes in option bytesmy question is1.how can I enable dual b...

STM32L151CB-A not booting from internal FLASH with RDP = BB (Level 0)

Dear all,I have a question regarding the read-out-protection on STM32 L1 series (STM32L151CB-A) and I was wondering, if the same problem occurred to anyone of you before.I am booting from internal flash memory (BOOT0 = GND) and set the option bytes R...

I am trying to enable secure boot in stm32L562ve and I enabled the secure boot via cube programmer(Option bytes - TZEN) with no application in flash memory. And now I can't connect the board.... how to disable trust zone in stm32L5 series?

STM32U5 Debug in RDP 0.5 With STM32CubeProgrammer

Hello,I am trying to start a debug session with STM32CubeIDE v1.11.2 on my board locked on RDP 0.5.I loaded a valid secure firmware which jumps into the non-secure firmware before setting RDP 0.5.I could connect STM32CubeProgrammmer and flash the non...

STM32 Trusted Package Creator v2.12.0 creates incorrect option bytes

STM32 Trusted Package Creator v2.12.0 creates incorrect option bytes which have 8 rows and no "reserved" last row As per AN5054, it should have exactly 9 rows The option bytes csv created from STPC v2.12 This leads to SFI programming failure. Am I mi...