Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
Hello everyone,I am experiencing an issue with my stm32H735 microcontroller after enabling RDP level 1. The program that was working perfectly (blinking led) under RDP level 0 no longer executes after I changed the protection level to 1.What I have T...
Hi, I have accidentally set the option byte PRODUCT_STATE=0x17 and the device is locked and shows the following when I do DA discover.This is the log related to the error message.12:09:28 : Start Debug Authentication Sequence12:09:28 : SDMOpen ...
We have an application running on an STM32WB55M. This user application makes use of standby mode, and the device is able to exit it when the configured pin changes state.However, once the SBSFU is integrated with the BLE_ota application, the user app...
In STM32H573-DK Board,explain in detail for the protection mechanism built on PCH for side channel attacks.
Hi everyone, I develop a asimmetric public/private key crypto scheme and then with simmetric derived ley establish a comms with HOST REMOTE <-> [LOCAL HOST/STSAFE]. I generate with ephimeral slot with:ret_code = (int32_t)StSafeA_GenerateKeyPair(hand...
Hello,Can we run STM32CubeU5 TFM Application (UM2581) on U575 since it has not crypto hw like U585?Thank you in advance!Best Regards!
I'm aiming to use the OEMiRoT sample project as a concept for secure updating of a large single-slot application in STM32U083 (need application size at least 160kB for migration from STM32L071). For that I need to give the bootloader a driver for ext...
Hi,I'm trying to get started with the SBSFU (2.6.2) on my custom board running an STM32L4A6. I've got a large external SDMMC flash chip (4GB) connected to the STM32 that I use for user application purposes. I'd like to allocate a small section of t...
Hello.I'm having trouble transfer the UserApp to SBSFU. Here's the description of the issue. Any help is appreciated!I prepared the NUCLEO-H753ZI board by disabling all the security and fully erase the board (by setting RDP level 1->0 ).I'm using the...
It seems perfectly possible, under Level 2, to have a "boot block" which accepts a firmware block (say via USB MSC or via HTTP), encrypted with a key stored in the boot block, and you have a product whose firmware can be upgraded but can't be extract...