Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hello,I am implementing Secure Manager V1.2.0 from X-CUBE-SEC-M-H5 in my firmware. I am following the instructions provided in the "How to start with Secure Manager (customized configuration) on STM32H5" page.Is it possible to configure Option Bytes ...
Hi all!I’m starting with secure zone projects using the STM32U575RIT6 microcontroller. First, I want a project with the secure zone active, and that jumps to the non-secure zone to print a message. However, when jumping to the secure zone (NonSecure_...
Hello Team,We are developing a bootloader for STM32H745 MCU. Follwoing are requirements, 1. SDcard will contain the images for M7, M4 and External QSPI flash connected to H745 MCU2. Planning to use Secure boot such as SBSFU. Please suggest if this is...
The STM32U585 chip comes with a pre provisioned device unique public / private key pair which can be used for SFI.Is there a way to be able to work with this key pair outside of SFI for our own custom use case?I know that we can export the device cer...
I have a board with an STM32U575CGTx on it and I am trying to execute a simple Trust Zone Enabled program. I have 2 sample projects attached 1.) Trust Zone Disabled, 2.) Trust Zone Enabled. The project with TZ Disabled runs perfectly, toggling a GP...
Hi there,My STM32H573I-DK demo board is stuck in PROVISIONING state, probably as the result of a failed or aborted provisioning operation. I was doing hand-on training with the How to start with STiRoT on STM32H573 wiki. Now, I cannot regress it to...
Hello,I am using the STM32U575ZIT6 microcontroller and have created a simple TrustZone project where all applications run in the non-secure zone. However, when the program attempts to switch to the non-secure zone, it triggers a hard fault handler er...
Hi folks,I am trying to use the hardware-AES of the STM32WLE5JC, but I get weird results that do not match the expected values. I am comparing my STM-implementation against RadioLib's Crypto which is based on tiny-AES-c and AES-CMAC. RadioLib's imple...
Hello, I have created an encrypted file by openssl-aes256-CFB. in openssl IV length should be 128 bit but in X-CUBE-CRYPTOLIB it is not possible, it cannot set to 128 bit, (HARDFAULT). only i can set 256bit and then received error 0x10003
hi i am trying to work with ST given example code of SBSFU for the U585 controller. Here my requirement is to add the active tampers to the system. in this given code i think tamper is only configured in the bootloader application only.tamper detecti...
