Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hi everyone,we have a bootloader that writes new application code to the flash bank 2 in an STM32H7 and afterwards swaps the banks to execute the new code. The procedure for swapping is something like this: unlock OPTLOCK set SWAP_BANK_OPT set ...
Hi, I am wondering if the build-in TRNG modules in the STM32L series (0, 1,2 ,4, 4+ and 5) are compliant with the NIST 800 90A/B/C standards. If so, where I can find information on ST stating such TRNG complies with this standards? We are developing ...
Hello, what wouldd be the best library to create private/public keys (RSA) and sign some messages ? I did not find a free library able to create and sign messages even in the smt32 crypto lib. Any clues ? Thank you in advance
Could someone elaborate on the tradeoffs of cryptographic scheme selection, especially between Asymmetric with AES encryption and Symmetric (AES GCM) ?While it is the default choice, it is not clear to me why SECBOOT_ECCDSA_WITH_AES128_CBC_SHA256 wou...
I'm taking STM32Cube and the CRYP example for NUCLEO-L496ZG as the basis for a new HW AES encryption Arduino library. I'm currently developing for the STM32L476 MCU and here I found the first problem since stm32l476xx.h does not seem to include the n...
I have the secure boot expansion package and I can't find any documentation at all that details how it integrates into CubeMX and how to install it. This is the expansion package:https://www.st.com/en/embedded-software/x-cube-sbsfu.htmlThanks in ad...
Hi,We were able to successfully port STM secure bootloader(SBSFU) on our custom boards. We could demo the firmware update using Teraterm(also extraputty) on windows machine as recommended by STM. But I was not able to update firmware using any of the...
Hello,In secured boot getting started it is said:"Download the SB SFU project software to the target without starting a debug session(Security protections managed by SBSFU forbid JTAG connection as it is interpreted as anexternal attack)"Does it mean...
Hello everyone,I'm tring to implement a calculation of firmware CRC in run time mode.Is there inker command method to acquire last address where code is written?I'm quite confident there is a specific command like __text_end__, for example.Best reg...