cancel
Showing results for 
Search instead for 
Did you mean: 

Looking for alternative STM32 peripheral libraries

Matt_12345
Associate II
Posted on June 12, 2014 at 16:11

Hi,

I'm in a project were we would like to use the STM32F103TBU7. As a toolchain we would like to use the IAR Embedded Workbench.

Sadly I'm not allowed to use the STM peripheral library. This because it's a security application and we have to use two different libraries.

Does somebody can give me a hint which library I could use?

We did already some tests with libopencm3 but this library is designed for the gcc compiler.

Thanks for your inputs

Matt 

#stm32-utasker
10 REPLIES 10
frankmeyer9
Associate II
Posted on June 13, 2014 at 09:05

I'm not aware of any such library that is NOT derived/copied from ST's standard peripheral library.

...I'm not allowed to use the STM peripheral library. This because it's a security application ...

 

Maybe my fault, but where is the link here ?

Posted on June 13, 2014 at 13:52

How's this make anything MORE secure? You have ALL the source code for review, and someone capable of pulling your code off and analyzing it is not going to be played with ''security through obscurity''

Tips, Buy me a coffee, or three.. PayPal Venmo
Up vote any posts that you find helpful, it shows what's working..
Posted on June 13, 2014 at 15:46

Simply don't use any ''library''. These are only a thin wrapper on direct access to hardware anyway.

Nevertheless, I have the same trouble understanding your concerns as Clive and fm.

JW

raptorhal2
Lead
Posted on June 13, 2014 at 17:15

I recommend you check with your company security with regards to what is required to do a blind buy of the IDE and peripheral library so neither IAR or ST are aware of the application, and then host the IDE isolated from access to public networks.

If the response is a blank stare, see what you can do to get a security professional on board.

Cheers, Hal

hpipon957
Associate III
Posted on June 16, 2014 at 14:44

>>I'm not aware of any such library that is NOT derived/copied from ST's standard peripheral library.

The uTasker STM32 project is not based in any way on ST's peripheral library:

http://www.utasker.com/

Regards

Mark

Andrew Neil
Evangelist III
Posted on June 17, 2014 at 00:38

''because it's a security application ... we have to use two different libraries''

As others, I don't really see how that helps security? Did you really mean  safety, reliability, or somesuch...?

''We did already some tests with libopencm3 but this library is designed for the gcc compiler''

And why is that a problem?

It doesn't seem to be explicitly bound to this compiler: 

http://libopencm3.org/wiki/Downloads

Matt_12345
Associate II
Posted on June 17, 2014 at 15:45

Thanks all for your responses.

I have meant safety before not security. In German language there is only one word for this, sorry for confusing you.

We will have two MCUs which will do things redundant. But the MCUs must be different not same silicon and also all code must be different. We decided to use two STM32 (different silicon). On one we will use the Standard Peripheral Library. On the other one I don't know at the moment?

Posted on June 17, 2014 at 16:18

Sounds like you need to thoroughly understand the functionality of the part, what better way than to review the register level operation and not use anyone elses library. Most any other solution seems to abdicate responsibility to a third-party for the failure of your device.

Tips, Buy me a coffee, or three.. PayPal Venmo
Up vote any posts that you find helpful, it shows what's working..
Andrew Neil
Evangelist III
Posted on June 17, 2014 at 21:07

''We decided to use two STM32 (different silicon)''

Hmm - I would call that the same  silicon!

Isn't the whole point to ensure that the same design and/or manufacturing flaw(s) can't affect both parts - but, if you get the parts from the same designer & the same manufacturer, that premise is seriously compromised?!

Should you even be using two controllers based on the same architecture...?

As someone said earlier, it sounds like you need to get professional advice on this...