Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.
The SBSFU framework allows users to employ multiple image signing keys, ECCKEY1, ECCKEY2, and ECCKEY3.Is there a method to blacklist ECCKEY1 and replace it with ECCKEY4, which may be transmitted via a key replacement update package if the private key...
We have STM32H755XI6 Controller, and we trying to incorporate the secure boot in our current secure boot with RDP level 1 and secure user memory (HDP protection) but our controller is getting locked up and not able to access (using IAR JTAG and ST LI...
I complie STM32F769I-Discovery 2_Images. the final SBSFU_UserApp image's size is 532kb, It's size will increase to 131,669 kb if ITCM used. I add below code to UserApp.sct ;ITCM 16k ITCMRAM_region 0x00000200 0x00004000 { fw_update_app.o (+RO...
Hello,How can I add STM32CryptographicV4.0.1 in the STM32CubeExpansion_SBSFU_V2.6.1 middleware for SBSFU application ?The current STM32CubeExpansion_SBSFU_V2.6.1 is used libSTM32CryptographicV3.1.1_STM32H7_GCC ST crypto library for STM32H7 boards. I ...
Hi,I want to test RSA signing and verification on the STM32. I found STM32CubeExpansion_Crypto_V4.0.1 with some RSA signing and verification example for NUCLEO-H743ZI. I want to port this application for NUCLEO-H7A3ZI.How can I port the application f...
I'm using SBSFU v2.6.2 on a Windows 10 x64 machine with CubeIDE v1.11.0I was recently modifying the postbuild script in an SBSFU-based project and noticed it has a bug setting the PATH variable when looking for prepareimage executable:export PATH=$ba...
I'm using an STM32L4A6ZG (as a nucleo board). This is the code I am using:#include "err_codes.h" #include "sk.h" #include "aes_common.h" #include "aes_cbc.h" #define AES_BLOCK 16 #define IV_LENGTH 16 #define SIZE 32__ALIGN_BEGIN static const uint8_t ...
Hi support team,i am testing the sbsfu code in P-NUCLEO-WB55 but i missed out to disable security ips SECBOOT_DISABLE_SECURITY_IPS and flash into the board it set RDP level to 1 also set SFU_WRP_PROTECT_ENABLE, SFU_TAMPER_PROTECT_ENABLE,SFU_DAP_PROTE...
Hi,I forgot to comment the protections set in app_sfu.h and tried debugging the code. Later I realized and commented everything and it is not allowing me to flash the program on the device. I made RDP level 0 from cube programmer, but still write pro...