Skip to main content

STM32 MCUs Security

Ask questions and find answers on STM32 security frameworks and tools, including cryptographic libraries, TrustZone, and the Secure Manager.

  • 2,133 Topics
  • 7,496 Replies
2133 Topics
N
nima.askariAssociate III
asked in STM32 MCUs Security
sabari1
sabari1Associate III
asked in STM32 MCUs Security
Tamper configuration in SBSFU code for stm32u5

hi i am trying to work with ST given example code of SBSFU for the U585 controller. Here my requirement is to add the active tampers to the system. in this given code i think tamper is only configured in the bootloader application only.tamper detection only occurred when bootloader code is running . no detection on secure or non secure code , i only can see the tamper irq handler in boot code , no implementation in secure or non secure code. i tried to remove the RTC and tamper configuration inside the bootloader code and tried to configure both in secure code that time its not working (initialization of RTC failing ,need to know weather some dependency is there or not with boot).then i tried to configure the RTC in boot itself and tamper initialization in secure part there whenever tamper occurred in the application(while running secure or non secure code) code is getting hanged otherwise works perfectly. whenever tamper occurred th

15741
C
gatadivijay
gatadivijayAssociate II
asked in STM32 MCUs Security
GSain.1
GSain.1Associate II
asked in STM32 MCUs Security
How to use cmox_aead_decrypt function with addData pointer = null and tag size = 0

Hi @Jocelyn RICARD, My team developed Android app with following code to encrypt the message then send it to STM32WB55 device via BLE : ... SecretKeySpec secretKeySpec = new SecretKeySpec(secretKey, "AES"); IvParameterSpec parameterSpec = new IvParameterSpec(iv); Cipher cipher = Cipher.getInstance("AES/CCM/NoPadding"); cipher.init(Cipher.ENCRYPT_MODE, secretKeySpec, parameterSpec); return cipher.doFinal(message); This code has no tag/addData inputs. First attempt:I develop the following code to decrypt the encrypted message on STM32WB55 device  with AddData/Tag variables filled 0 because I dont use them: const uint8_t AddData[] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0

15442
GSain.1
M
MeenakshiAssociate III
asked in STM32 MCUs Security
S
SebastianAdamsAssociate
asked in STM32 MCUs Security
STM32H7 SBSFU Firmware Validation

Hi all,I'm new to using the STM secure boot/secure firmware update and I'm trying to understand how the verification works when sending a new firmware image to the board. I got SBSFU running on an STM32H750B-DK dev board and successfully loaded the example UserApp program from the SBSFU extension package. I then tried to corrupt the firmware image file by flipping a single bit in a copy of the firmware file created with python script utilizing the shutil.copyfile() method, which from its documentation does not copy file metadata. From what I understand, when I try to load the corrupted image onto the board using Tera Term and selecting the "Download a new Fw image" option, after verifying the keys the SBSFU should verify the integrity of the new firmware image by checking both the header and the rest of the file compared to the current image. Is my understanding correct? Or does the SBSFU only verify the image signature?This brings me to my issue. In some

19783
Jocelyn RICARD
B
bear2023RAssociate III
asked in STM32 MCUs Security
TFM / CubeMX integration

HI,we are interested in a guide to  a clear workflow of integrating CubeMX-generated code for U5 into TFM-based application.In particular:1. We have trustzone-enabled CubeMX-generated app with Azure RTOS and TouchGFX. The IDE and compiler are IAR. We want to be able to easily debug and re-build it, as needed, without any much security involved and, even most important, without manipulations with flash loaders and signed binaries every time a single line of code gets changed. 2. Once we are happy with stable code behaviour, then we want to "wrap" it in TFM, by letting the latter to create signed binaries and the loader, as per TFM example for U5 from STM. If any intermittent step((s) required to achieve so: adjusting addressees, locations, etc - we are OK to create custom pre/post builds ourselves. But we'd like to know what exactly steps are needed. So the questions are:a). Is there any help/guide/examples or any other s

36643
Jocelyn RICARD
R
RustyCohleVisitor II
asked in STM32 MCUs Security
Read Secure World Registers with GDB

Hello everyone,I am currently debugging a Cortex-M33 MCU with TrustZone-M. During my debugging session, I have observed some unexpected behavior when reading the VTOR (Vector Table Offset Register) in both secure and non-secure states using GDB.BackgroundThe core is executing in the secure state.I have accessed the VTOR (0x0E00_0ED08) and its non-secure alias (0x0E002_ED08) registers through GDB.Initial ValuesThe VTOR_S (secure state) register initially held the value 0x0C00_0000.The VTOR_NS (non-secure state) register initially held the value 0x0800_0000.Expected OutcomeThe value read from the VTOR register (0x0E00_0ED08) should be 0x0C00_0000.The value read from the VTOR non-secure alias (0x0E002_ED08) should be 0x0800_0000.Observed ResultsThe value read from 0x0E00_0ED08 was 0x0800_0000.The value read from 0x0E002_ED08 was 0x0.

10151
Jocelyn RICARD
N
NileVisitor II
asked in STM32 MCUs Security
A
aafloresVisitor II
asked in STM32 MCUs Security
A
AkihiroNSenior
asked in STM32 MCUs Security
MStra.3
MStra.3Associate III
asked in STM32 MCUs Security
A solution to adding CRC32 to the end of the Binary file after build

I spend a lot of time looking and never could find an easy way to do this. I came up with a solution and thought I would post it.I am using the STM32F407. The F4 series only has one way of calculating the CRC in hardware and that is what I chose to use in the Binary file. This way, the F4 can easily verify a file when it is uploaded to it for a firmware update.I have attached a Zip file with an EXE in it called CRC32. It requires one parameter - the name of the file to add a CRC32 to. It assumes the file size will be a multiple of 4 bytes. It then reads the file and calculates the CRC. When it reaches the EOF it inverts the CRC and appends it to the end of the file. This way when the whole file with added CRC32 is CRC'd again on upload, the result should be 0xFFFFFFFF. If CRC32 is run on the same file multiple times, it will continue to add CRC32's to it - probably not what you want, but if you make this automatically run each time you build, that should

77293
Tesla DeLorean
L
lieronVisitor II
asked in STM32 MCUs Security
Dosan
DosanAssociate III
asked in STM32 MCUs Security
T
thealbertdevAssociate III
asked in STM32 MCUs Security
STM32WB linker file

I'm having issues with a project based on an STM32WB5MM where some devices fail to operate BLE (like advertising, for example). The project integrates SBSFU and BLE_ota. I'm reviewing the linker files and I see differences in the management of the BLE buffer between a standalone application and an application with OTA and SBSFU. In the standalone application generated by STM32CubeIDE, I have this in the linker file:     .ARM.attributes 0 : { *(.ARM.attributes) } MAPPING_TABLE (NOLOAD) : { *(MAPPING_TABLE) } >RAM_SHARED MB_MEM1 (NOLOAD) : { *(MB_MEM1) } >RAM_SHARED /* used by the startup to initialize .MB_MEM2 data */ _siMB_MEM2 = LOADADDR(.MB_MEM2); .MB_MEM2 : { _sMB_MEM2 = . ; *(MB_MEM2) ; _eMB_MEM2 = . ; } >RAM_SHARED AT> FLASH     and in the application with integrated SBSFU and OTA, I have:    

12821
STTwo-32
B
bear2023RAssociate III
asked in STM32 MCUs Security
TFM / CubeMX integration and debugging

HI,we are interested in a guide to  a clear workflow of integrating CubeMX-generated code for U5 into TFM-based application.In particular:1. We have trustzone-enabled CubeMX-generated app with Azure RTOS and TouchGFX. The IDE and compiler are IAR. We want to be able to easily debug and re-build it, as needed, without any much security involved and, even most important, without manipulations with flash loaders and signed binaries every time a single line of code gets changed. 2. Once we are happy with stable code behaviour, then we want to "wrap" it in TFM, by letting the latter to create signed binaries and the loader, as per TFM example for U5 from STM. If any intermittent step((s) required to achieve so: adjusting addressees, locations, etc - we are OK to create custom pre/post builds ourselves. But we'd like to know what exactly steps are needed. So the questions are:a). Is there any help/guide/examples or any other s

7420
B
N
naNEQAssociate II
asked in STM32 MCUs Security
STSAFE-A110 and MbedTLS - Authenticating IoT device to MS Azure IoT Hub

Hi,In our application, we want to authenticate our IoT devices in Azure IoT Hub using X509 certificates with the help of STSAFE-A110. The application is written in Zephyr RTOS and is using the MbedTLS library for the TLS part. Using the in-tree Zephyr libraries for secure sockets, it is necessary to load the device private key and certificate, in the simplest way from an MCU Flash memory. They are eventually used when calling the functions mbedtls_pk_parse_key() and mbedtls_x509_crt_parse(). My goal is to integrate STSAFE-A110 in this process, so that the device private key and certificate are stored in STSAFE-A110 instead of the MCU Flash. I'd like to get some feedback on whether the process sounds reasonable.I suppose the process would look something like this:While in production, we should provision STSAFE-A110 with the device's individual certificate. It needs to be like this, because authentication in Azure requires that the subject common na

16881
N
jsalg.1
jsalg.1Associate II
asked in STM32 MCUs Security
A
adityarajchauhan051Associate II
asked in STM32 MCUs Security
J
jijomathewAssociate III
asked in STM32 MCUs Security
J
jijomathewAssociate III
asked in STM32 MCUs Security
N
naNEQAssociate II
asked in STM32 MCUs Security
STSAFE-A110 and hardware-level security

I'd like to open a small discussion about what would be the best usage of STSAFE-A110 to enhance the hardware-level security of our IoT device. To be more specific, in our application we want to use the STSAFE-A110 to store the customized device private key and certificate (not the standard leaf certificate in zone 0), that will be used for TLS authentication at the server.I'm trying to think how this will help in case that a malicious adversary gets hold of our hardware. I suppose nothing is completely secure and it all depends on how good one needs to be protected and/or how many obstacles one wants to make it for the attacker.Let's however, do a thought experiment. What can the attacker do with our hardware?I suppose that since the device private key and certificate are not in the MCU flash but in the A110, the attackercannot get hold of the private key, but can use it for signing (right?)can read out the device certificateWh

12261
B
S
ShaffiAssociate II
asked in STM32 MCUs Security
A
apoorvabsAssociate
asked in STM32 MCUs Security
S
ShaffiAssociate II
asked in STM32 MCUs Security

Badge winners

  • Solution Contributor 50
    FBLhas earned the badge Solution Contributor 50
  • Solution Contributor 25
    FBLhas earned the badge Solution Contributor 25
  • Solution Contributor 10
    FBLhas earned the badge Solution Contributor 10
  • Solution Contributor 5
    FBLhas earned the badge Solution Contributor 5
  • Solution Contributor 1
    FBLhas earned the badge Solution Contributor 1
Show all badges
Terms & ConditionsAccessibility statement