Overview
Tools & Software
Resources
Solutions
Quality & Reliability
Sales Briefcase
eDesignSuite
Get Started
Sample & Buy
Partner products
  • The X-CUBE-SBSFU Secure Boot and Secure Firmware Update solution allows the update of the STM32 microcontroller built-in program with new firmware versions, adding new features and correcting potential issues. The update process is performed in a secure way to prevent unauthorized updates and access to confidential on-device data.

    In addition, Secure Boot (Root of Trust services) checks and activates STM32 security mechanisms, and checks the authenticity and integrity of user application code before every execution to ensure that invalid or malicious code cannot be run.
    The Secure Firmware Update application receives the encrypted firmware image, checks its authenticity, decrypts it, and checks the integrity of the code before installing it.
    X-CUBE-SBSFU is built on top of STM32Cube software technology, making the portability across different STM32 microcontrollers easy. It is provided as reference code to demonstrate the state-of-the-art usage of STM32 security protection.
    The X-CUBE-SBSFU Expansion Package comes with examples running on the STM32L4 Series, STM32F4 Series, STM32F7 Series, and STM32G0 Series.
    X-CUBE-SBSFU is classified ECCN 5D002.

    Key Features

    • Secure Boot / Root of Trust: boot path cannot be modified. User application authenticity and integrity is checked before execution.
    • Secure firmware loader: downloads an encrypted firmware image via UART interface / Ymodem protocol and checks its authenticity and integrity before installing it.
    • Dual image support for safe firmware programing:
      • Error detection and rollback capabilities during image installation.
      • Over The Air firmware download possible from user application.
    • Single image support for maximized user application size:
      • Error detection without rollback capability during installation.
      • Firmware update only possible via the SBSFU application (local loader function).
    • Asymmetric and symmetric cryptographic schemes supported:
      • ECDSA asymmetric cryptography scheme for firmware verification with AES-CBC decryption.
      • ECDSA asymmetric cryptography scheme for firmware verification without decryption.
      • AES-GCM symmetric cryptography scheme for firmware verification and decryption.
    • Cryptography with integrated firmware preparation scripts delivered as executable and source code for customization flexibility.
    • Secure Engine services: protected environment managing all critical data (such as firmware decryption key), and operations (such as cryptography operations).
    • STM32 security mechanisms: combination demonstrating the state-of-the-art use of STM32 protections.

Get Software

Development Tools

    • Part Number

      STM32CubeProgrammer software for programming STM32 products

Evaluation Tools

    • Part Number

      Discovery kit with STM32F413ZH MCU

      Discovery kit with STM32F769NI MCU

      Discovery kit with STM32L496AG MCU

      STM32L4 Discovery kit IoT node, low-power wireless, BLE, NFC, SubGHz, Wi-Fi

      STM32 Nucleo-64 development board with STM32G071RB MCU, supports Arduino and ST morpho connectivity

      STM32 Nucleo-32 development board with STM32L432KC MCU, supports Arduino connectivity

      STM32 Nucleo-64 development board with STM32L476RG MCU, supports Arduino and ST morpho connectivity

00 Files selected for download

Technical Documentation

    • Description Version Size Action
      DB3343
      Secure Boot and Secure Firmware Update software expansion for STM32Cube
      4.0
      165.77 KB
      PDF
      DB3343

      Secure Boot and Secure Firmware Update software expansion for STM32Cube

    • Description Version Size Action
      AN5056
      Integration guide for the X-CUBE-SBSFU STM32Cube Expansion Package
      3.0
      3.19 MB
      PDF
      AN5056

      Integration guide for the X-CUBE-SBSFU STM32Cube Expansion Package

    • Description Version Size Action
      UM2312
      Development checklist for STM32Cube Expansion Packages
      1.0
      283.23 KB
      PDF
      UM2285
      Development guidelines for STM32Cube Expansion Packages
      1.0
      485.46 KB
      PDF
      UM2262
      Getting started with the X-CUBE-SBSFU STM32Cube Expansion Package
      4.0
      2.77 MB
      PDF
      UM2312

      Development checklist for STM32Cube Expansion Packages

      UM2285

      Development guidelines for STM32Cube Expansion Packages

      UM2262

      Getting started with the X-CUBE-SBSFU STM32Cube Expansion Package

Presentations & Training Material

    • Description Version Size Action
      STM32 and STM8 embedded software solutions 7.0
      3.12 MB
      PDF
      X-CUBE-SBSFU Marketing presentation 1.2
      1.12 MB
      PDF

      STM32 and STM8 embedded software solutions

      X-CUBE-SBSFU Marketing presentation

Publications and Collaterals

    • Description Version Size Action
      STM32Cube Software expansion - Secure boot & secure firmware 1.0
      1.32 MB
      PDF

      STM32Cube Software expansion - Secure boot & secure firmware

    • Description Version Size Action
      STM32 Open Development Environment Brochure 17.09
      1.21 MB
      PDF
      Sensor & motion algorithm software pack for STM32Cube 1.0
      544.58 KB
      PDF

      STM32 Open Development Environment Brochure

      Sensor & motion algorithm software pack for STM32Cube

Legal

    • Description Version Size Action
      SLA0048
      Mix Ultimate Liberty+OSS+3rd-party V1 - SOFTWARE LICENSE AGREEMENT
      5.4
      87.58 KB
      PDF
      SLA0048

      Mix Ultimate Liberty+OSS+3rd-party V1 - SOFTWARE LICENSE AGREEMENT