ST X-CUBE-SBSFU STM32Cube

To Next Page

To Previous Page

AN5056 Rev 8 7/49

AN5056 General information

The X-CUBE-SBSFU Secure Boot and Secure Firmware Update Expansion Package runs

on STM32 32-bit microcontrollers based on the Arm

®(a)

Cortex

-M processor.

a. Arm is a registered trademark of Arm Limited (or its subsidiaries) in the US and or elsewhere.

Main Page

Table of Contents2
General Information6
Table 1. List of Acronyms6
Table 2. List of Terms6
Related Documents8
Porting X-CUBE-SBSFU Onto Another Board9
Hardware Adaptation9
Figure 1. SBSFU Project Structure9
Memory Mapping Definition10
Figure 2. Memory Mapping Example (NUCLEO-L476RG)10
Figure 3. Linker File Architecture11
Figure 4. Mapping Constraints with MPU Isolation (NUCLEO-G071RB Example)12
Figure 5. Mapping Constraints for User Application Execution12
SBSFU Region Definition Parameters13
Figure 6. SBSFU Regions (NUCLEO-L476RG Mapping_Sbsfu.icf)13
Firmware Image Slot Definition Parameters14
Figure 7. Firmware Image Slot Definitions (NUCLEO-L476RG Mapping_Fwimg.icf)14
Figure 8. Firewall Configuration Constraint on Dual Bank Products15
Figure 9. Firewall Configuration after Bank Swap15
Project-Specific Linker Files16
Figure 10. Secorebin Specific Linker File16
Figure 11. SBSFU Specific Linker File16
Multiple Image Configuration17
Figure 12. Userapp Specific Linker File (NUCLEO-L476RG Example)17
Dual-Core Adaptation18
Figure 13. Multiple Image Configuration18
Figure 14. STM32H7 Series Dual-Core Adaptation19
SBSFU Configuration20
Features to be Configured20
Cryptographic Scheme Selection21
Figure 15. SBSFU Configuration21
Security Configuration22
Figure 16. Switching the Cryptographic Scheme22
Figure 17. STM32L4 Series and STM32L0 Series Security Configuration (App_Sfu.h)23
Figure 18. STM32F4 Series, STM32F7 Series and STM32L123
Figure 19. STM32G0 Series, STM32G4 Series, and STM32H7 Series24
Security Configuration (App_Sfu.h)24
Figure 20. STM32WB Series Security Configuration (App_Sfu.h)24
Development or Production Mode Configuration25
Figure 21. Option Bytes Management26
Generating a Cryptographic Key27
Generating a New Firmware AES Encryption Key27
Generating a New Public/Private ECDSA Pair of Keys27
For Firmware Verification27
Figure 22. New Firmware Encryption-Key27
STM32WB Series Specificities28
Figure 23. New Private/Public Keys28
KMS Specificities29
Figure 24. Key Provisioning29
STSAFE-A110 Specificities30
Figure 25. KMS Specificities30
Figure 26. STSAFE-A110 Pairing Keys30
Tips for Debugging31
Compiler Optimizations Level31
Memory Mapping Adaptation31
Figure 27. Compiler Optimizations31
Debugging Secorebin32
Figure 28. Memory Mapping Adaptations32
Figure 29. Checking the WRP Protection32
Figure 30. Debugging Inside Secorebin33
Adapting SBSFU34
Implementing a New Cryptographic Scheme for SBSFU34
Figure 31. User's Cryptographic Scheme Implementation34
Optimizing Memory Mapping36
Table 3. SBSFU Code-Size Reduction36
Figure 32. Example of Memory Mapping Optimization on NUCLEO-G071RB - 2 Images37
How to Activate Interruption Management Inside the Firewall Isolated38
Environment38
Figure 33. IDE Adaptations38
How to Improve Boot Time39
Figure 34. Boot Time39
Adapting the User Application40
How to Make an Application SBSFU Compatible40
Figure 35. Vector Table Position Update (NUCLEO-L476RG Example)40
Figure 36. User Application Binary File Length41
Figure 37. IDE Adaptations41
Use of Flash Memory to Store User Data43
Figure 38. Free Flash Pages (NUCLEO-L476RG Example)43
Changing the Firmware Download Function in the User Application44
Figure 39. Userapp Firmware Download Overview44
How to Change the Firmware Version45
How to Validate a Firmware Image45
Figure 40. Firmware Version Change45
Figure 41. Validation Menu46
Revision History47
Table 4. Document Revision History47

ST X-CUBE-SBSFU STM32Cube - Page 7

Table of Contents

Related product manuals