STM32 Trusted Package Creator

• STM32 Trusted Package Creator is part of the STM32CubeProgrammer tool set (STM32CubeProg), and allows the generation of secure firmware and modules to be used for STM32 secure programming solutions which are:

•Secure firmware install (SFI): SFI is a secure mechanism that allows secure installation of OEM firmware in untrusted production environments by having the whole firmware encrypted with an AES-GCM key.

•Secure module install (SMI): SMI is intended to protect a part of the firmware (a section of an ELF file) by also encrypting this section using an AES-GCM key.A combined SFI-SMI image is an SFI image that contains one or more module areas.

•Secure firmware upgrade (SFU): SFU is a solution to allow the upgrade of the STM32 microcontroller built-in program in a secure way.

• For more information about SFU, refer to the X-CUBE-SBSFU package on http://www.st.com for further information.

File:STM32 Trusted Package Creator tool software description.pdf