Can STM32MP13 decrypt on the fly binary code from user?

Dat Tran · ‎2023-05-04

Does STM32MP13 support decryption on the fly binary code on SD/MMC, entire SD/MMC or just TF-A firmware?

We have customers need protect their code on SD/MMC, does STM32MP13 have any feature to support that?

Thanks

Olivier GALLIEN · ‎2023-05-23

Hi @Community member ,

STM32MP13 has no capability to decode on-the-fly from SD/MMC

But you can decrypt the protected code on SD card by SW and copy it inside secure or encrypted DDR area to be executed by Secure service at run time.

To help you further we will need more details about protected code.

Olivier

Olivier GALLIEN
In order to give better visibility on the answered topics, please click on 'Accept as Solution' on the reply which solved your issue or answered your question.

View solution in original post

Olivier GALLIEN · ‎2023-05-23

Hi @Community member ,

STM32MP13 has no capability to decode on-the-fly from SD/MMC

But you can decrypt the protected code on SD card by SW and copy it inside secure or encrypted DDR area to be executed by Secure service at run time.

To help you further we will need more details about protected code.

Olivier

Olivier GALLIEN
In order to give better visibility on the answered topics, please click on 'Accept as Solution' on the reply which solved your issue or answered your question.

PatrickF · ‎2023-05-24

Hi @Community member

details for TF-A ecncryption: https://wiki.st.com/stm32mpu/wiki/STM32_MPU_ROM_code_secure_boot#Image_encryption

details of DDR on the fly encrypt/decrypt HW (DDRMCE): https://wiki.st.com/stm32mpu/wiki/DDRMCE_internal_peripheral

Regards.

In order to give better visibility on the answered topics, please click on 'Accept as Solution' on the reply which solved your issue or answered your question.