Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hello.If i set the product state to CLOSED (0x72) without TZ-enabled (TZEN: 0xC3),i can't access the device and the OBK-Keystore from outside.But if i write a user program, i can read the whole OBK-Keystore at:FLASH_OBK_BASE_S + 0x0100;So perhaps it...
Hi, I am working on OEMiROT bootloader for STM32H523. I have copied big parts of the ST OEMiROT example project from H533 example as this is the closest MCU to H523 from the flash memory layout perspectives. However, it is taking ridiculously too lon...
Hi, There is a lot of differing documentation w.r.t the use of mbedTLS for STM32U5 MUC. Can someone share an "Application Note" or any documentation which explains the integration of mbedTLS library in the project. PS: The relevant configuration file...
I have implemented AES encryption / decryption on a STM32WB55 using keys stored in FUS. However, I'm running into a problem when I try to encrypt or decrypt using a non-FUS key. I get a hardfault when the key is written to the registers. Which I assu...
We have a project where we're using a U5A5 MCU with trustzone enabled and we're currently trying to figure out how to flash without having to use the SAM card. I downloaded the example from ST and am trying to run through the B-U585I-IOT02A TFM exam...
I am implementing encryption and decryption using AES-GCM mode on the STM32 NUCLEO-U5A5ZJ-Q. I have successfully encrypted and decrypted the string "Hello", but I am having issues with tag authentication.I am using the function HAL_CRYPEx_AESGCM_Gene...
Hello community,I need to use the AES-CMAC functionality of the STM32L562QE.The datasheet says that it is supported :But it seems that the reference manual doesn't say anything about CMAC functionality.Is there really a way to use the AES coprocessor...
Hi ,I can find AES DPA in TFM demo application, but can't find TDES DPA implementation in TFM.Please advise how to implement TDES DPA.
My H5 DK board is in TZ-CLOSED state (after --sfi-flash), I am unable to put it in "Level 1/2/3 Intrusive Debug" state no matter what combinations of keys and certificates to use (including key_1_root.pem and cert_root.b64). Only Full regression work...
Hello everyone,Now I'm developing an user application compatible with SBSFU on STM32CubeIDE.SBSFU itself is pretty nice, but I feel the development architecture and environment are a little bit old, like not supporting CubeMX.Fortunatelly, I succeede...