IP protection using MCU Root of Trace configuration

STMicroelectronics (ST) has released X-CUBE-SBSFU v.2.0, an STM32Cube extension software package that integrates Secure Boot, secure firmware updates, and security engine services.

X-CUBE-SBSFU enables product developers to leverage all the security features of STM32 microcontrollers to help protect and manage the lifecycle of connected products, such as IoT endpoints.

X-CUBE-SBSFU's secure boot can protect IP by establishing a Root of Trust (RoT) on the microcontroller. It inspects and enables security mechanisms built into the STM32, verifying the trustworthiness and integrity of user application code before any execution takes place to prevent the execution of invalid or malicious code. These trusted devices can perform mutual authentication in accordance with superior IoT security methods when connecting to a network or remotely.

The secure firmware update feature supports device management throughout its lifecycle by handling secure loading and secure firmware programming to provide fixes, feature upgrades, and security updates capable of responding to the latest security threats. The security loader supports several authorized digital signatures (ECDSA or AES methods) and encryption (AES-GCM) algorithms to receive, authenticate, and decrypt encrypted firmware images, thereby verifying the integrity of the code.

This secure programming supports a single image update that fits the maximum size of the user application, as well as a dual image update capable of supporting anti-rollback during image installation and Over-The-Air (OTA) firmware download.

In addition, X-CUBE-SBSFU's security-engine service provides a comprehensive package to protect connected devices and maintain the security of IoT networks by storing critical data, such as encryption keys, and maintaining a secure environment for executing encryption algorithms.

The X-CUBE-SBSFU extension software package is provided as a reference library available for free under a Software License Agreement (SLA), and includes technical documentation to help implement best-in-class protection features for STM32L4 and STM32L4+ security functions. Built on ST’s STM32Cube software technology, this package enables easy porting across the entire STM32 family, which consists of over 800 devices offering diverse performance, memory capacity, feature integration, I/O, and connectivity options. Code references for other STM32 series will also be provided by updating the X-CUBE-SBSFU package.