-
The X-CUBE-SBSFU Secure Boot and Secure Firmware Update solution allows the update of the STM32 microcontroller built-in program with new firmware versions, adding new features and correcting potential issues. The update process is performed in a secure way to prevent unauthorized updates and access to confidential on-device data.
The Secure Boot (Root of Trust services) is an immutable code, always executed after a system reset, that checks STM32 static protections, activates STM32 runtime protections and then verifies the authenticity and integrity of user application code before every execution in order to ensure that invalid or malicious code cannot be run.
The Secure Firmware Update application receives the firmware image via a UART interface with the Ymodem protocol, checks its authenticity, and checks the integrity of the code before installing it. The firmware update is done on the complete firmware image, or only on a portion of the firmware image. Examples are provided for single firmware image configuration in order to maximize firmware image size, and for dual firmware image configurations in order to ensure safe image installation and enable over-the-air firmware update capability commonly used in IoT devices. Examples can be configured to use asymmetric or symmetric cryptographic schemes with or without firmware encryption.
The secure key management services provide cryptographic services to the user application through the PKCS #11 APIs (KEY ID-based APIs) that are executed inside a protected and isolated environment. User application keys are stored in the protected and isolated environment for their secured update: authenticity check, data decryption and data integrity check. This is available on the STM32L4 Series with example provided on the B-L475E-IOT01A board.
STSAFE-A100 is a tamper-resistant secure element (HW Common Criteria EAL5+ certified) used to host X509 certificates and keys, and perform verifications that are used for firmware image authentication during Secure Boot and Secure Firmware Update procedures. This is available on the STM32L4 Series with example provided on the B-L475E-IOT01A board.
X-CUBE-SBSFU is built on top of STM32Cube software technology, making the portability across different STM32 microcontrollers easy. It is provided as reference code to demonstrate best use of STM32 security protections.
The X-CUBE-SBSFU Expansion Package comes with examples running on the STM32L4 Series, STM32F4 Series, STM32F7 Series, STM32G0 Series, STM32G4 Series, STM32H7 Series, STM32L0 Series, STM32L1 Series, and STM32WB Series. An example combining STM32 microcontroller and STSAFE-A100 is also provided for the STM32L4 Series.
X-CUBE-SBSFU is classified ECCN 5D002.主な特徴
- Secure Boot to check firmware image before execution
- Secure Firmware Update with anti-rollback and partial image update capabilities for over-the-air or local firmware image update
- Secure key management services offering cryptographic services by means of the PKCS #11 APIs
- Standalone STM32 system solution example demonstrating best use of STM32 protections to protect assets against unauthorized external or internal access
- Combined STM32 and STSAFE-A100 system solution example demonstrating hardware Secure Element protections for secure authentication services and secure data storage
ソフトウェア入手
| 製品型番 | 概要 | Software Version | サプライヤ | GitHub link | ダウンロード |
|---|---|---|---|---|---|
| X-CUBE-SBSFU | Secure boot & secure firmware update software expansion for STM32Cube | 2.2.0 | ST | - | x ライセンス契約同意Please indicate your acceptance or NON-acceptance by selecting “I ACCEPT” or “I DO NOT ACCEPT” as indicated below in the media. BY INSTALLING COPYING, DOWNLOADING, ACCESSING OR OTHERWISE USING THIS SOFTWARE PACKAGE OR ANY PART THEREOF (AND THE RELATED DOCUMENTATION) FROM STMICROELECTRONICS INTERNATIONAL N.V, SWISS BRANCH AND/OR ITS AFFILIATED COMPANIES (STMICROELECTRONICS), THE RECIPIENT, ON BEHALF OF HIMSELF OR HERSELF, OR ON BEHALF OF ANY ENTITY BY WHICH SUCH RECIPIENT IS EMPLOYED AND/OR ENGAGED AGREES TO BE BOUND BY THIS SOFTWARE PACKAGE LICENSE AGREEMENT. Under STMicroelectronics’ intellectual property rights and subject to applicable licensing terms for any third-party software incorporated in this software package and applicable Open Source Terms (as defined here below), the redistribution, reproduction and use in source and binary forms of the software package or any part thereof, with or without modification, are permitted provided that the following conditions are met:
THIS SOFTWARE PACKAGE IS PROVIDED BY STMICROELECTRONICS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS, IMPLIED OR STATUTORY WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT OF THIRD PARTY INTELLECTUAL PROPERTY RIGHTS ARE DISCLAIMED TO THE FULLEST EXTENT PERMITTED BY LAW. IN NO EVENT SHALL STMICROELECTRONICS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE PACKAGE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. EXCEPT AS EXPRESSLY PERMITTED HEREUNDER AND SUBJECT TO THE APPLICABLE LICENSING TERMS FOR ANY THIRD-PARTY SOFTWARE INCORPORATED IN THE SOFTWARE PACKAGE AND OPEN SOURCE TERMS AS APPLICABLE, NO LICENSE OR OTHER RIGHTS, WHETHER EXPRESS OR IMPLIED, ARE GRANTED UNDER ANY PATENT OR OTHER INTELLECTUAL PROPERTY RIGHTS OF STMICROELECTRONICS OR ANY THIRD PARTY. |
Save as PDF ビデオ
MadeForSTM32™ is a new quality label delivered by ST, which is granted after an evaluation process. It helps engineers identify third party solutions with the highest level of integration and quality for the STM32 microcontrollers' ecosystem. MadeForSTM32™ is offered to members of the ST Partner Program who want to go one step further in our collaboration, with the overall objective of contributing to a high-quality STM32 ecosystem.
The STM32Cube.AI is an extension pack of the widely used STM32CubeMX configuration and code generation tool enabling AI on STM32 Arm® Cortex®-M-based microcontrollers.
The X-CUBE-VS4A Expansion Package consists of a set of libraries and application examples for STM32F7 Series microcontrollers acting as Alexa-enabled devices. It runs on the 32F769IDISCOVERY board, which provides a native Ethernet interface.
開発ツール･ハードウェア
-
-
Picture 製品型番 製造元 概要 
STM32CubeProg ST STM32CubeProgrammer software for all STM32 製品型番STM32CubeProgrammer software for all STM32
-
開発環境
-
-
Picture 製品型番 製造元 概要 
X-NUCLEO-SAFEA1 ST Secure element expansion board based on STSAFE-A110 製品型番Secure element expansion board based on STSAFE-A110
-
評価ツール
-
-
Picture 製品型番 製造元 概要 
32F413HDISCOVERY ST Discovery kit with STM32F413ZH MCU 
32F769IDISCOVERY ST Discovery kit with STM32F769NI MCU 
32L496GDISCOVERY ST Discovery kit with STM32L496AG MCU 
B-L475E-IOT01A ST STM32L4 Discovery kit IoT node, low-power wireless, BLE, NFC, SubGHz, Wi-Fi 
NUCLEO-G071RB ST STM32 Nucleo-64 development board with STM32G071RB MCU, supports Arduino and ST morpho connectivity 
NUCLEO-L432KC ST STM32 Nucleo-32 development board with STM32L432KC MCU, supports Arduino nano connectivity 
NUCLEO-L476RG ST STM32 Nucleo-64 development board with STM32L476RG MCU, supports Arduino and ST morpho connectivity 製品型番Discovery kit with STM32F413ZH MCU
Discovery kit with STM32F769NI MCU
Discovery kit with STM32L496AG MCU
STM32L4 Discovery kit IoT node, low-power wireless, BLE, NFC, SubGHz, Wi-Fi
STM32 Nucleo-64 development board with STM32G071RB MCU, supports Arduino and ST morpho connectivity
STM32 Nucleo-32 development board with STM32L432KC MCU, supports Arduino nano connectivity
STM32 Nucleo-64 development board with STM32L476RG MCU, supports Arduino and ST morpho connectivity
-
