STM32H533CE datasheet(44/231 Pages) STMICROELECTRONICS

44 / 231 page

Functional overview

STM32H533xx

44/231

DS14539 Rev 1

•

AHB slave peripheral, accessible through 32-bit word accesses only (else an AHB

error is generated)

•

8 × 32-bit words (H0 to H7) for output message digest

•

Automatic data flow control with support of direct memory access (DMA) using one

channel. Single or fixed burst of 4 supported.

•

Interruptible message digest computation, on a per-32-bit word basis

–

Re-loadable digest registers

–

Hashing computation suspend/resume mechanism, including using DMA

3.31

On-the-fly decryption engine (OTFDEC)

The OTFDEC allows the decryption of the on-the-fly AHB traffic based on the read request

address information, for example execute-in-place of a code stored encrypted. Four

independent and non-overlapping encrypted regions can be defined in OTFDEC.

OTFDEC uses AES-128 in counter mode to achieve the lowest possible latency. As a

consequence, each time the content of one encrypted region is changed the entire region

must be re-encrypted with a different cryptographic context (key or initialization vector). This

constraint makes OTFDEC suitable to decrypt read-only data or code, stored in external

NOR flash.

Note:

When OTFDEC is used in conjunction with OCTOSPI, it is mandatory to access the flash

memory using the Memory-mapped mode of the flash memory controller.

When security is enabled in the product, OTFDEC can be programmed only by a secure

host.

The OTFDEC main features are the following:

•

On-the-fly 128-bit decryption during OCTOSPI memory-mapped read operations

(single or multiple)

–

Use of AES in counter (CTR) mode, with two 128-bit keystream buffers

–

Support for any read size

–

Physical address of the reads is used for the encryption/decryption

•

Up to 4 independent encrypted regions

–

Granularity of the region definition: 4096 bytes

–

Region configuration write locking mechanism

–

Each region has its own 128-bit key, two bytes firmware version, and eight bytes

application-defined nonce. At least one of those must be changed each time an

encryption is performed by the application.

•

Encryption keys confidentiality and integrity protection

–

Write-only registers, with software locking mechanism

–

Availability of 8-bit CRC as public key information

•

Support for OCTOSPI pre-fetching mechanism

•

Possibility to select an enhanced encryption mode to add a proprietary layer of

protection on top of AES stream cipher (execute only)

•

AMBA® AHB slave peripheral, accessible through 32-bit word single accesses only

(otherwise an AHB bus error is generated, and write accesses are ignored)

•

Secure only programming if TrustZone security is enabled

STM32H533CE Arkusz danych(PDF) 44 Page - STMicroelectronics

STM32H533CE Arkusz danych(HTML) 44 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Arkusz danych Pobierz

Link URL