Drone Security Project: SBSFU Implementation

[korkeep]

Hi :grinning_face:

I am working on my project of ensuring the hardware security of the Drone's Flight Controller.

I am planning to use ARM PSA to ensure security of Drone System at hardware level.

I am developing drone security system by using NUCLEO-L552ZE-Q.

For this, I am referring to the SBSFU of STM32CubeL5, and there are two issues currently.

1. If I want to apply Secure Boot for a new binary file (Ex: nuttx.bin), which part of the source code should be changed?
2. How to turn off Secure Boot and return to the original state? Using regression.sh doesn't bring it back. :crying_face:

Thank you sincerely :folded_hands:

PS) My project Link: https://github.com/korkeep/PX4-Trust

[Jocelyn RICARD]

Hello Korkeep,

First I would suggest having a look to the UM2671 Getting started with STM32CubeL5 TFM application

I'm not sure to understand your first question.

The way to provide the new signed binary is through UART/YModem as described in the documentation.

Regarding regression I can't tell like this what is your issue.

I can suggest watching following videos:

1) the security workshop with TFM related parts videos 8 to 14 in the following list

https://www.youtube.com/playlist?list=PLnMKNibPkDnGd7J7fV7tr-4xIBwkNfD--

2) In the security TIPS, the video number 2 Safe configuration of RDP and trustzone

https://www.youtube.com/playlist?list=PLnMKNibPkDnGxKqGyLbiGygmlrvISIBIT

These will give you the understanding on how things work.

Best regards

Jocelyn