STM32 MCUs Security

HI, I am trying to port one of ST's security hands on labs for firmware protection that targeted v3.1.3 of the CryptoLib package, to v4.0.1 of the CryptoLib package. It seems like the "legacy" v3.1.3 interfaces for SHA256_Init() / Append() / and Finish() (see screen shot below) have changed since I am getting unresolved symbols for these SHA256 calls when I try and link to the library in the new Crypto package. Would someone know where I can get information about the new interfaces for these functions? I searched the header files in v4.0.1 of the crypto package and was not able to find any files that describe equivalent functions. The ST firmware protection hands on lab that I am trying to port to v4.0.1 Crypto package is described in my earlier post here - https://community.st.com/s/question/0D53W000018Sf7hSAC/cryptolib-for-stm32go

My user application firmware is rather big. It runs on STM32G070, so I've adapted the example code from STM32G071. I've followed the example provided in AN5056 (see picture) to reduce the SBSFU size, it saved about 10 kB, but it is not enough (still overflows by about 5 kB).The last row depicts the method that can give the most of saved space, but how I do it? Does it mean to uncomment #define SECBOOT_DISABLE_SECURITY_IPS? Or something else?

Hi all,I would like to use the Cryptographic peripheral in my STM32L451 to encode and decode some data based on a pre-stored common key.Are there any examples for Atollic that would get me started on this?

I am currently experimenting on stm32l562e-dk board, and I discovered that, in the secure world, non-secure flash cannot be read via a secure memory region (i.e. not covered by any of the SAU regions). To be specific, value of zero is read.I am wondering whether this behavior is architecturally specified or just STM32-specific.Thanks

Hello everyoneSo I've managed to build MY user app, where a lot of things programmed alongside sbsfu support.But the binary file is simply huge - 134 MB! How comes?Also, sfb file does not get generated. May it be connected to disabled security defines? My controller does not have secure memory area

It looks like STM32L496xx.h does not have the hash peripheral definitions in it. e.g. The STM32Cube_FW_L4_V1.16.0 examples for STM32L496 HASH peripheral are all configured to use the STM32L4A6xx. Does ST have a plan to update STM32L496xx.h?, or Is it ST's accepted solution to define the L496 MCU as STM32L4A6xx?

Hi，All.​First of all, LET me tell you the background of the problem. I use STM32G0 series MCU.  The SWD port will be hardware connected to one of my wireless communication modules for OTA upgrade function.  Then I tried to use the read protection function at the same time, but I found that when the RDP level changed (from level 0 to Level 1), the RDP could only take effect after the power reset.  I have checked the document of RM0454 and mentioned that when SWD port is connected, it is necessary to replace system reset by power-on reset.  Here comes the question:1.Is there any way to write RDP level 1 without power reset operation? (SWD interface always hardware connected but no sigal communitication)  2.Is it possible to restore it to level 0 or level 1 after RDP have been set to level 2?Regards!

Hi, I'm in the process of going through the labs in part 4 of the ST Security MOOCs, specifically the hands on over here .https://www.youtube.com/watch?v=0CVplWZ8zls&list=PLnMKNibPkDnF0wt-ZI74SflnsBV4yKzkO&index=3The hands on asks to connect a terminal to the board in order to receive some output from the app running on a Nucleo G071RB board. I am not, however, able to see any output, any ideas as to why that is? My Tera term configuration is given below, thanks! Upon reset I just get garbage printed to the screen as depicted in the 3rd screen shot below  

I am trying to merge UserApp example into my existing project. Everything goes fine, except for the error mentioned in the title. I've checked that include list is identical to UserApp example, as well as Linker->Miscellaneous->Other flags. What am I missing?EDIT: I've forgot to mention that I'm using the example for STM32G071xx and my MCU is STM32G070xx. IDE is STM32CubeIDE.

I am using the STM32L562E-DK development kit. I have taken reference to NUCLEO-L552ZE-Q and ported it for STM32L562E-DK. Also added External OSPI flash. without FreeRTOS it is working fine.I have added FreeRTOS in the nonsecure application. For that, I have made the following changes1) Adopt Middleware folder as provided in "FreeRTOS_ThreadCreation" example of STM32L562E-DK2) Adopt stm32l5xx_hal_timebase_tim.c3) Remove SysTick_Handler() definition in stm32l5xx_it.c file.4) Add void HAL_TIM_PeriodElapsedCallback(TIM_HandleTypeDef *htim) API in main5) Add osKernelInitialize(); and osKernelStart(); in main().The same changes are working for the GPIO_IOToggle example. I am able to toggle GPIO in the thread. But in the case of the SBSFU Application is not working. Is there any specific change is required in bootloader or application?@Frantz LEFRERE​ , @Jocelyn RICARD​  Can you please guide me regarding it?

Hello,I am adapting the X-CUBE-SBSFU (version 2.5.0) for use in our product which uses the STM32L486RE device and I am using external flash memory to receive the downloaded firmware image. I used the sample project '2_Images_ExtFlash' for the B-L475E-IOT01A board as a starting point and I have been able to get everything up and running on my target hardware. I can bootload a small user application similar to the one used in the sample. However, I have run into some problems because the real application image that I will be installing is larger than a single bank of the MCU internal flash space.I have configured the bootloader to use one active slot in internal flash and have placed the header of the active image immediately after the SBSFU code (__ICFEDIT_SB_region_ROM_end__). The active image is allocated the remainder of the internal flash with the exception of the last sector that I need to keep reserved for storing application non-volatile data. At this poi

Hello guys!How are u all?I'm having few issues to develop self-test on my application. I setup everything from the SBSFU side to check image handling flags, and its working fine. I'm able to set my new firmware to self-test state and check the state of my active slot.My problem begin when i need to self-test. I have the following code on my application: printf("Before SE_APP_GetActiveFwState.."); SE_APP_GetActiveFwState(&se_Status, slot_number, &fw_state); printf("After SE_APP_GetActiveFwState..");   if (fw_state != FWIMG_STATE_SELFTEST) { printf("Firmware not is SELF_TEST state\r\n"); } else { printf("Firmware is in self test!\r\n");   se_retCode = SE_APP_ValidateFw(&se_Status, slot_number); if ((SE_SUCCESS == se_retCode) && (SE_OK == se_Status)) { printf("Firmware validated\r\n"); } else { printf("Firmware validation failure\r\n"); } }All i want is just to validate my firmware image. After

Hello,I have a system with one STM32L562QEI6 and one STM32F405RGT6, that is the main MCU.They communicate with USART interface.In the main CPU, boot0 and boot1 pins are phisically connected to VCC or GND through some resistors, so I can enter boot mode or leave the program run easily.On the STM32L562QEI6, I used a pull down in the boot0 pin and I connected this pin also to USART-RX line. When I want to enter boot mode on this MCU, I send a logic high level from the main MCU through USART-RX but the MCU won't boot. I see the high level on boot0 pin but I can't access boot memory. I don't understand why.Only with external connection between boot0 and VCC, MCU enter boot mode.Please can you help me?

Hello,I am trying to run the Secure boot feature on STM32L433RC using the SBSFU library example project (single image slot). The example project I am modifying is STM32L432KC board. Below are the modification/steps I made to example project to run on STM32L433RC:change the UART GPIO pins.change the LED GPIO pins.Disabled all the protections for now.Compiled SECore, SBSFU and User app.Downloaded the SBSFU to STM32L433RC.Opened Tera Term, Hit reset button.When asked to send the file using YMODEM protocol, I selected the SBSFU_UserApp.bin and the below error in the image is getting triggered. Can anyone help me to successfully load the User app onto the board? Please let me know if I need to modify anything more or change the above modifcations.Thanks!

HI,I have successfully implemented encryption in my project using STM32 cryptographic firmware library software expansion for STM32Cube. It works fine with 128 bit AES encryption (i.e. using 16 bytes long AES key). However, I need to implement 256 bit AES encryption and if I change the 16 bytes long key to 32 bytes, then the encryption does not work anymore. It seems that the default setting for encryption key is 16 bytes long. So could you please let me know what should I do other than changing the length of the key. I mean is there some library files or some other files where I have to make some changes to make 256 bit AES encryption working. It would be a great help for me because I have been stuck in the situation for quite a long time.

Hello everyone,I am trying to build SECoreBin, but the build fails with prebuild.sh. All python requirements listed in requirements.txt are installed, but the error is following:ImportError: No module named Cryptodome.CipherAnd even more: What should I do? As I have said, cryptodome is installed.

HelloI would like to use the same UART that is used in SBSFU, to communicate with the host PC for service purposes. Is it possible? Maybe create kind of a wrapper interface like "press 1 for sbsfu, 2 for logs"? A little bit confused how to implement it if possible. It is the only UART available on my custom board, all pins are already used.

Hi,I just downloaded the latest cryptolib v4 and read in the docs that it is not compatible with v3 anymore.Are there any instructions how to use it with the "STM32 Security in practice" workshop?Thanks,Anguel

HelloI'm having trouble calculating crc. I am using STM32F401 with cube ide. The correct crc occurs on crccalc.com. But I couldn't run CRC-8 with MCU. I have looked at the examples, but when I try it gives different results.  Can you provide a working code example?

I am using STM32H747BI MCU and I have one project to write the data to flash memory. I am using core 7 to write the data to flash. While writing, I have to encrypt the data. So I requested cryptographic library software expansion from STM32 and they provided me the software. From that software, I copied four files:stm32h7xx_hal_cryp.cstm32h7xx_hal_cryp.hstm32h7xx_hal_cryp_ex.cstm32h7xx_hal_cryp_ex.hAfter that, I put these files in respective inc and src folders and I uncommented #define HAL_CRYP_MODULE_ENABLED  from stm32h7xx_hal_conf.h. After doing all of these, I started to encrypt the data but in the project it could not find CRYP_HandleTypeDef . It shows the error unknown type name 'CRYP_HandleTypeDef'. Could anybody suggest me what the problem is because I don't know how to solve this issue as I have done all the things that needs to be done.

I am exploring the security feature of STM32WL55JC via Applications/BFU_1_Slot using latest firmware STM32Cube_FW_WL_V1.1.0I am not sure what I am doing wrong and I have followed youtube and readme.txt. I was able to compile as below and upload STM32CubeProgrammer and RDP to 0 (AA).Here is IDE output07:28:47 **** Build of configuration Debug for project 1_Image_UserApp **** make -j7 all arm-none-eabi-size UserApp.elf text data bss dec hex filename 25312 144 9928 35384 8a38 UserApp.elf Finished building: default.size.stdout "../../../1_Image_SECoreBin/STM32CubeIDE/postbuild.sh" ".." "./UserApp.elf" "./UserApp.bin" "1" "1" prepareimage with python script 07:28:50 Build Finished. 0 errors, 0 warnings. (took 3s.330ms)Below files are successfully created by postbuild.sh-rw-r--r-- 1 username staff 25968 28 Sep 07:28 UserApp.sfb -rw-r--r-- 1 username staff 89456 28 Sep 07:28 BFU_UserApp.binBelow is minicom output from macOS and I could see same from TerraTerm too.Welcome to mi

Is there any configuration we need to modify in prepareimage.py to overcome this error "ERROR: overlapped zone is not empty" or any other configuration?Below is output.txt file.python /Users/username/Downloads/STM32Cube_FW_WL_V1.1.0/Middlewares/ST/STM32_Secure_Engine/Utilities/KeysAndImages/prepareimage.py block size =16 Magic: SFU2!! Magic: SFU2!! header 0x0803F000 merge: python /Users/username/Downloads/STM32Cube_FW_WL_V1.1.0/Middlewares/ST/STM32_Secure_Engine/Utilities/KeysAndImages/prepareimage.py mergev2 -v 0 -e 1 -b ../../../STM32CubeIDE/Binary/SBSFU_LoRaWAN_End_Node_DualCore_CM0Plus.bin@0x801f200;../../../STM32CubeIDE/Binary/LoRaWAN_End_Node_DualCore_CM4sfuh.bin@0x0803F000 -f ../../../../2_Images_SBSFU/STM32CubeIDE/CM4/Debug/SB.elf;./LoRaWAN_End_Node_DualCore_CM4.elf ../../../STM32CubeIDE/Binary/SBSFU_LoRaWAN_End_Node_DualCore_CM4.bin number of segment :4 0x8000138 0x80016a0 0x80016b0 Adding ELF file: ../../../../2_Images_SBSFU/STM32CubeIDE/CM4/Debug/SB.elf from 0x8000000 to 0x8

Hello!I have a problem with STM32L496RG booting from flash after activating readout protection level 1. The issue is that MCU seems to get stuck in system bootloader code. The only way to get it to boot from main flash is to apply power on reset.Accroding to RM0351 section 3.5.1 the readout protection is activated by system reset or power-on reset if debug was active. In my case I have no debugger connected and still the system reset is not enough to activate RDP and boot from main flash.I have tried activating readout protection option bit via STM32CubeProgrammer and also from my firmware. In firmware, after calling HAL_FLASH_OB_Launch() the MCU ends up in unknown state where it does not respond to system bootloader command nor start executing program from main flash.In my application I have backup power source constantly connected and there is no easy way for end user to apply power-on reset after firmware update. Is it known bug/feature for this device or am I doing something wrong?

Hello guys,I was setting up my STM32CubeIDE to use the SBSFU sample projets. I'm facing a issue with SECore engine, more specific the postbuild.sh script.When i compile SE, i get the following message:ln: failed to create symbolic link '../../postbuild.sh': File exists.ln -s ./SECBOOT_ECCDSA_WITH_AES128_CBC_SHA256.sh ../../postbuild.sh : failedAnyone know how i could solve this?

Hi everyone,I am using STM32F469/STM32F479 and want to integrate SBSFU with an SPI flash. Basically the active image is in MCU's 1 Mbytes flash and downloaded image is in the external flash. There are several questions I would like to know before I start.Refer to STM32F13ZHTx_FLASH.ld in STM32F413H_DISCOVERY_2_Images_SBSFU, there is a memory region for SE_CallGate. I assume this is a feature in firewall, which is not applied to F4 series. Do I need to care about it for my STM32F469?About memory region, can I simply change the address boundary in mapping_fwimg.ld and keep the same size for SBSFU itself for STM32F469? I just want to shrink the flash size for firmware image and keep SBSFU the same for simplicity.As for integrating the external flash for downloading new image, I plan to use the example in B-L475E-IOT01A as a reference. Is there any thing I need to aware in terms of the differences between F4 and L4 MCU?Any suggestion is welcomed. Thanks.Best,Sean