STM32 MCUs Security

How to validate firmware in custom user application for STML4+ SBSFU?

For sbsfu in the following parts:In AN5056 rev6, see section 8.5 How to validate a firmware image.In UM2262 rev8, Appendix JIt says: At the first user application start-up, if the execution is correct (for example after self-tests execution) the user...

STM32 Crypto library, performing signing on a message file data not match with openssl data

I am working on STM32 crypto library and using STM32L433RC controller,I am facing the issue of signature mismatching.i have followed below stepsStep -1 Key generation using openssl tool for ECC256 curveopenssl ecparam -name prime256v1 -genkey -noout ...

Link to Download full X-CUBE CryptoLib v3 package

HI I am looking for a link to download the older version of CryptoLib v3, I can only find links to download the latest CryptoLib v4 here which is not the version that I'm looking for. Thanks! https://www.st.com/content/my_st_com/en/products/embedded-...

What is the correct procedure to replace the example UserApp in SBSFU with a different existing project in STM32CubeIDE (generated with CubeMX)?

I have attempted the following:-Build and tested a simple app, called TestApp with STM32CubeIDE/CubeMX, runs fine on itself (without SBSFU)-Build and tested the SBSFU 2_images example, works fine.-The TestApp runs on the same hardware as the SBSFU ex...

what is the FIPS certification available for X-CUBE-CRYPTOLIB ?? I see NIST-CAVP Certification which is FIPS 186, what is the difference from FIPS 140-2/140-3 complaint. is both are same ?

We are looking for FIPS 140-2 / 140-3 certified Secure Boot loader implemented with help of X-CUBE-CRYPT LIB for STM32H753VI MCU.if i see NIST-CAVP certification, it is mentioned as STM32L4 series, then is thios same certificate is applicable for STM...

I am working on RDP programming on STM32U575 . My query is how can i perform RDP 2 to RDP 1 regression(or RDP 1 to RDP 0) using OEM keys in my firmware ?

I found an application note for regression of RDP level using OEM keys via STM cube CLI .But my use case is to do it by firmware .Can it be done ?/Jaroslav HOUDEK​  @zqizh.1​ 

Why interrupts not occur under debug when RDP switched to level 1?

WIth oocd I try to do following steps:1) Send reset and halt command2) disable bit DHCSR.C_MASKINTS3) Enable interrupts into ISER reg4) Make any interrupt pending in ISPR reg5) Perform Step commandif readout protection is diasabled, core interrupt oc...

I want to start the update out of my application as the UserApp does. I have ported the functions but I'm searching for the definition of SlotEndAdd and SlotStartAdd. They are defined as external in sfu_fwimg_regions.h.