Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hi I am working on SBSFU Application project from STM32U585 project. And I am trying to use mbed-crypto APIs like SHA512 APIs as below mbedtls_platform_setup(NULL);mbedtls_sha512_init(&sha512_context);mbedtls_sha512_starts(&sha512_context, 0); // 0 f...
Hi,We are going for mass production of our device and we are using STM32H563IIK6 chip. And We need JTAG need to be Locked.And in our production we are using Segger JLINK .Can you provide how to implement PRODUCT_STATE using Segger JLINK.
Hello,We are planning to integrate the STSAFE110 into our device, which runs on Ubuntu. Since we’ll be developing our own code to retrieve the unique ID, I wanted to ask if there is any reference manual or documentation available for this. I couldn’t...
In OEMiROT_BOOT project compilation, first we are checking if the is recognized or not. Before that "Project.eww" needs to be opened and then we are creating the Project.bin binary file under EWARM. So how to do that. My purpose is to perform OTA via...
Hi,I am working on the wiki "How to start STiRoT".Actually, my board in in CLOSE state and the DA returns the error "Debug Authentication failed" after Discovery (see below). The key and certificate used is the deafult ones.The connection through STL...
I am working with SAES on STM32U585. I am trying to make use of wrapping/unwrappinng my encryption key with hardware-secret key DHUK . This in the SAES initialization I am using hcryp.Instance = SAES; hcryp.Init.DataType = CRYP_BYTE_SWAP; hcryp.I...
Hi everyone,We’ve been using the XCUBE-SBSFU bootloader in our industrial-grade project and recently noticed that SBSFU is now labeled as a legacy bootloader. It seems the new recommended bootloader is based on MCUBoot. Additionally, I’ve come across...
I am having trouble to get OBK data reading working on the STM32H562 / H563 (which do not support secure storage because they are lacking hardware crypto support).My plan is to store keys in the OBK area, (encrypted with some storage key of my own) a...
I am trying to get SBSFU (1_image) running on the STM32H755. I'm working from um2262 and this post https://community.st.com/t5/stm32-mcus-security/sbsfu-porting-to-a-custom-board/m-p/200240/highlight/true#M2917 My setup is a NUCLEO-H755zi, STM32CubeT...
Using MX created an app utilizing Secure Manager 1.2 on STM32H573, after running 'provisioning.py --sfi-gen', the generated sfi image does not include the non-secure app image; after 'provisioning.py --sfi-flash', the product-state is set to TZ-CLOSE...