About MVass.1

MVass.1 · 2022-05-08

Hi,I've finally reached the stage where I can test the SSP flowI burned a debug AES128GCM key on my ST-HSM-v2 cardI created a 148 bytes secrets file and passed it through TrustedPackageCreator tool to get the 244 bytes fileI created a signed ssp-tf-a...

MVass.1 · 2022-05-03

Hi,I want to perform the SSP process as detailed at:https://www.st.com/resource/en/application_note/an5510-overview-of-the-secure-secret-provisioning-ssp-on-stm32mp1-series-stmicroelectronics.pdf(I also went over the STM32_prog documents)I am now try...

MVass.1 · 2022-04-19

Hi, In both SSP documents: 1) AN5510 - Overview of the secure secret provisioning (SSP) on STM32MP1 Series 2) AN5054 - Secure programming using STM32CubeProgrammer It is written that "SSP" & "HSM" tabs expect: """ Encryption key and nonce files: ...

MVass.1 · 2022-04-04

Hi,We wish to add CRC16 checksum to our communication payloads,and I see in the stm32mp157 datasheet CRC module section that it should support CRC32,16,8 and 7 bits."""25.4.3 CRC control register (CRC_CR)Bits 4:3 POLYSIZE[1:0]: Polynomial sizeThese b...

MVass.1 · 2022-03-20

Hi,My bellow question is based on info read from:https://wiki.st.com/stm32mpu/wiki/STM32MP15_ROM_code_overview#Configurationandhttps://wiki.st.com/stm32mpu/wiki/STM32MP15_backup_registers#Boot_mode_selection_featureFrom those two links I understand t...

MVass.1 · 2022-05-22

Maybe I am still using wrong prog tool version ?Also, where is the MPU_SSP_ATTEMPTS-- logic (4 ssp attempts)Is it in the MPU's rom code, or the tf-a-spp ?If it is in the tf-a-spp maybe I will be able to debug this issue without destroying boards by c...

MVass.1 · 2022-05-08

UPDATE:I debugged the "failed: -22" log from u-boot side and found out it's because stm32prog_set_phase() is called with phase=83 (0x53) and it's not in data objectI switched to STM32_Programmer_CLI version 2.7.0 to see if maybe it's due to compatibi...

MVass.1 · 2022-05-08

Thanks @OlivierK This method worked(although I had to do the "-d tf-a-ssp-stm32mp157f-ev1-trusted.stm32 0x01 -s" command twice in a row for the "-gc" command to work)Is this really the expected way to determine which file needs to be used ? there mu...

MVass.1 · 2022-04-26

Hi,Thanks for the clarificationRegarding your second answer, I don't think you are correctThe STM32MP_KeyGen_CLI tool's documentation writes:"STM32 KeyGen is a tool that generates the ECC key pairs needed for signing binary images. "I also tried the ...

MVass.1 · 2022-04-14

It works, thanks againIMO, you should add this info to the wiki page that mentions the TAMP_REG[20] info

User statistics

User Activity

secure secret provisioning (SSP) not working

ST-HSMv2 programming - personalization data & fw id

secure secret provisioning (SSP) documentation error ?

Hardware accelerated CRC16

Serial boot via the TAMP_REG[20] howto

Re: secure secret provisioning (SSP) not working

Re: secure secret provisioning (SSP) not working

Re: ST-HSMv2 programming - personalization data & fw id

Re: secure secret provisioning (SSP) documentation error ?

Re: Serial boot via the TAMP_REG[20] howto