How to protect Bootloader binary on STM32MP15xxx

[Dat Tran]

Hi,

We see signing + encryption bootloader on STM32MP13xx,

But on STM32MP15xx, there is only signing. The raw binary still start from offset 256 of the signed file. This only make sure the board doesn't run a strange bootloader, but doesn't prevent someone copy raw bootloader from SD.

Is there any way to protect bootloader binary on STM32MP15xx lines?

[PatrickF]

Hi @Community member​ ,

encryption of FSBL is not supported on STM32MP15x.

Regards.