2019-07-31 11:34 PM
Dear all. How secure is STM32 MCUs to prevent hackers from dumping the firmware from the flash memory? I've searched on the internet and on Taobao (like ebay) China and I found there are plenty of companies that claim they can crack and dump the flash code for almost any STM32 MCUs. Below is an example link :
I believe they have tools the decap a MCU and connecting the wires by FIB or some technologies to the silicon die to dump the code in the flash memory. This is a very big threat to people like us who works on STM32 MCUs. I would like to know STMicroelectronic's opinion regarding this issue. Is setting RDP level to 2 (disconnect debugging port permanently) a more secure way to protect the firmware from being dumped? Anything we can do to prevent piracy? I've read from some Chinese forum that the UID of a STM32 MCU can also be changed easily.
Chris
2019-08-01 01:40 AM
People with more time, equipment and experience are likely to find a weakness.