2025-01-14 7:10 AM - last edited on 2025-04-16 8:32 AM by Amel NASRI
After the build process for the project, I get a file.bin that I want to encrypt to be protected and decrypted in my chip via the bootloader. How is this done, knowing that I use stm32 cube ide?
2025-04-24 11:01 AM
Hi Mahmoud
The question is general, no information provided on the STM32 Family, the installation environment .... There are many possible answers. I suggest the following as first guidelines:
- For trusted solution, the best way is to follow the ST SFI solution which provides security when programming devices in non-trusted environment. Then, use SBSFU which is an ST implementation of the secure boot and secure firmware update security feature.
Note that for test you can use openssl or python scripts to encrypt the binary, then use the same keys to decrypt the firmware.
Best regards