STMicroelectronics STM32H5 with Debug Authentication and SFI

SMH Technologies increased again its portfolio by supporting the recent STMicroelectronics devices STM32H5 and all of the crypto-security features.

The STM32H5 series is based on the 32-bit Arm® Cortex®-M33 core running as high as 250 MHz. It offers the best combination of performance and security, in an affordable way.

The STM32H5 provides a scalable security offer to address every need, including the security requirements of IoT devices. Developers can choose between several offers ranging from: the most essential security services to fully certified building blocks maintained by ST over the product lifecycle. This MCU series gives you more flexibility in your design choices.

SMH already supports all security features of STM32H5 devices such as Product State management.

In fact, all Provisioning and Regression features are available in FlashRunner 2.0 even in full standalone mode.

STM32H5 and allows you to inject passwords into the device useful for unlocking the device. The key provisioning process is complex and depends on the STM32H5 you use and on internal device settings.

For example, there are cases in which a Password or Certificates are used. Furthermore, in addition to this, there are various boot flows also divided into several monotonic states.

The Product State of the device must follow very specific steps, for example starting from the default Open state the device will have to go to Provisioning state and then to a final state which can be for example Closed, Trust-Zone Closed, Locked and so on.

At this point, if in the Provisioning state you had entered the data correctly into the device, there is the possibility of returning to the Open state or to another Product State using a special procedure called Regression through the injection of specific passwords or certificates and keys.

The procedure is very complex but FlashRunner is able to perform all of these features automatically.