Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hi,I am working on regression from RDP1 to RDP0 with OEM1KEY but made from inside and not by external debugger.I want device to be able to make self unlocking.As I read in documentation RM0456, OEM1KEY unlock sequence requires:Shift OEM1KEY[31:0] th...
Hi everybody,I am using a platform that is based on STM32. The developers of this platform have provided to me the firmware image as an encrypted .bin file. When I flash it via USB everything is fine.Then I change their code and recompile everything ...
The OEMiRoT project uses ExitSecureMemory V1.1 to enable 1 MPU region and start the application. This automatically enables the configured HDP region, so application cannot access the bootloader. The default OEMiRoT project allows for 2 tiny 64kB app...
Hello,I'm currently working on a project using the STM32U5A5VJT6 processor, and I'm exploring the feasibility of implementing WireGuard in a bare-metal environment. I found one mention of WireGuard in this community post [link], however afaik it is a...
Hello ST,I am using stm32u575 board for secure flash access, When TZEN is enabled i am able read and write to Secure flash(0x0C00 8000), but unable to read/write to non secure area(0x08100 0000). Then I used User Option BytesSECWM1_PSTRT/SECWM1_PEND ...
I am working with the NUCLEO-H563ZI, and I'm trying to write an application that verifies an ECDSA Certificate. I have already successfully done the verification using the HAL_PKA_ECDSAVerif() function provided with all the parameters. My problem is...
Hello,I have implemented most of the functions required for decompressing the public key using the PKA arithmetic functions. But, I'm encountering a timeout error with HAL_PKA_ModExp, even when setting a high delay with HAL_MAX_DELAY. Additionally, t...
Hello,I am implementing Secure Manager V1.2.0 from X-CUBE-SEC-M-H5 in my firmware. I am following the instructions provided in the "How to start with Secure Manager (customized configuration) on STM32H5" page.Is it possible to configure Option Bytes ...
Hi all!I’m starting with secure zone projects using the STM32U575RIT6 microcontroller. First, I want a project with the secure zone active, and that jumps to the non-secure zone to print a message. However, when jumping to the secure zone (NonSecure_...
Hello Team,We are developing a bootloader for STM32H745 MCU. Follwoing are requirements, 1. SDcard will contain the images for M7, M4 and External QSPI flash connected to H745 MCU2. Planning to use Secure boot such as SBSFU. Please suggest if this is...