Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hello all,I have been working on a bare metal Rust implementation of the PKA engine in the STM32WBA55CG microcontroller. So far, I managed to properly initialize the PKA engine, and run both modular addition and subtraction by writing and reading the...
Hello,We are using an STM32H573 with the Secure Manager provided by ST running in the secure environment. In the non-secure environment, we are calling PSA functions. These calls work before ThreadX is launched but fail afterward.According to the pag...
Greetings,I would like to know, in summary, what are the key main differences between RDP (ReadOut Protection) and PcROP (Proprietary Code Readout Protection), which one is safer and use cases.Thank you!
Hi,I am working on the SBSFU default code, which handles swapping content from the download slot to the active slot. However, I need to skip the swapping process and after Decryption download slot boot directly from the download slot.Could you please...
Hi ST team,We are using STM32H573VI controller for our product development, here we are facing an issue to develop JTAG locking mechanism, As we gone through reference manual of STM32H5 controller, we observed that in FLASH_OPTSR_PRG register contain...
Hi,I am evaluating/learning the SBSFU application example on STM32WBA55CG. I have disabled the MCUBOOT_HW_ROLLBACK_PROT and generated the signed confirmed image sbsfu_app_init.bin using the imgtool.exe without the security counter TLV using the belo...
How can I generate the sfu_se_mpu.s file for the STM32H753ZI and STM32H733 controllers in SBSFU?
Hi,I come to you about the key provisioning process for the iROT in the STM32H5.Using TrustedPackageCreator, the keys provided in the file STiROT_Config.xml for the Secure Boot (field <Authentication key>) are both the private and public keys of the ...
I’ve successfully compiled the SBSFU (Secure Boot Secure Firmware Update) code for the STM32H753ZI and updated the firmware. Now, I would like to use it with the STM32H733VGT6 MCU.Previously, I was using the STM32H753ZI controller, which did not util...
Hello,I am having some trouble understanding what bootloader (if any) is installed by ST from the factory for the STM32U5x and what AES key sizes that bootloader supports for secure firmware update. UM2851 only lists AES-CTR-128 (I interpret 128 to b...
