Feature STM32C0 STM32F0 STM32F1 STM32F2 STM32F3 STM32F4 STM32G0 STM32G4
RNG No No No SP800‑90‑A No SP800‑90‑A
Secure software
SBSFU No No No No No Yes Yes Yes
TF-M No No No No No No No No
KMS No No No No No No No No
1. Only XL density devices feature the MPU.
2. MPU is not universally supported in STM32F3 series. Refer to the product datasheet to confirm availability.
3. Unique boot entry.
Table 10. Security features for STM32L0/1/4/4+, STM32WB, STM32WL devices
Feature STM32L0 STM32L1 STM32L4 STM32L4+ STM32WB STM32WL
Cortex core Cortex‑M0 Cortex‑M3 Cortex‑M4 Cortex‑M4/Cortex‑M0+
RDP additional
protection
EEPROM Backup registers, SRAM2
Flash WRP By sectors (4 Kbytes)
By area with 2‑Kbyte granularity, one
area per bank
By area
with 4‑Kbyte
granularity, two
areas available
By area
with 2‑Kbyte
granularity, two
areas available
SRAM WRP No No SRAM2, with 1‑Kbyte granularity
PCROP By sectors
By area with 8‑byte granularity, one
area per bank
By area
with 2‑Kbyte
granularity, up to
two areas
By area
with 1‑Kbyte
granularity, two
areas available
HDP No No No No
Yes (dedicated
to Cortex‑M0+
firmware only)
Yes
Firewall Yes No Yes Yes No Yes
MPU Yes Yes Yes Yes Yes (Cortex‑M4) Yes
OTP No No 1 Kbyte
UBE
(1)
No No No No No
Yes (boot lock
feature)
Internal tamper
detection
No No No No No Yes
Hardware crypto AES AES, HASH
AES, HASH,
(some PKA)
AES, PKA
RNG No No SP800‑90‑A SP 800‑90‑B SP800‑90‑A SP 800‑90‑B
Secure software
SBSFU Yes Yes Yes Yes Yes Yes
TF-M No No No No No No
KMS No No Yes Yes No No
1. Unique boot entry.
AN5156
Overview of security features
AN5156 - Rev 8
page 28/56