- Small size. Fits in 4K ROM segment (ASM or no encription, otherwise a bit more).
- USB DFU1.1 compatible
- supports by dfu-util
- Supports one of the following ciphers
- No encryption
- ARCFOUR stream cipher
- CHACHA20 stream cipher (C and ASM implementation)
- RC5-32/12/128 block cipher in CBC mode (C and ASM implementation)
- GOST R 34.12-2015 "MAGMA" block cipher in CBC mode
- RAIDEN block cipher in CBC mode
- SPECK 64/128 block cipher in CBC mode
- XTEA (classic and XTEA-1) block cipher in CBC mode
- Different interfaces for flash and eeprom programming
- Autoseal using RDP level 1 or 2 (prevents reading decrypted FW trough debug interface). Be careful when you set RDP to level 2. This operation is irreversible and disables all debug functions and option bytes programming.
- Software for firmaware encryption/decription included
- Supported STM32 family
- STM32L0x2
- STM32L1xx
- STM32L476xx (OTG FS in device mode)
Bootloader can be configured using preprocessor variables stored in config.h
- Prerequisites
- GNU make
- arm-none-eabi-gcc toolchain v4.9 or later to build bootloader
- gcc toolchain to build fwcrypt software
- optional st-util tool to program bootloader
- Makefile targets
- make mcu_target to build bootloader
- make program to flash bootloader using st-flash
- make crypter to build encryption software
| mcu_target | MCU | remarks |
|---|---|---|
| stm32l100x6a | STM32L100C6-A | |
| stm32l100x8a | STM32L100R8-A | |
| stm32l100xba | STM32L100RB-A | |
| stm32l100xc | STM32L100RC | tested |
| stm32l151x6a | STM32L151C6-A, STM32L151R6-A | |
| stm32l151x8a | STM32L151C8-A, STM32L151R8-A, STM31L151V8-A | |
| stm32l151xba | STM32L151CB-A, STM32L151RB-A, STM31L151VB-A | |
| stm32l151xc | STM32L151CC, STM32L151QC, SRM32L151RC, STM32L151UC | |
| stm32l151xd | STM32L151QD, STM32L151RD, STM32L151VD, STM32L151ZD | |
| stm32l151xe | STM32L151QE, STM32L151RE, STM32L151VE, STM32L151ZE | |
| stm32l152x6a | STM32L152C6-A, STM32L152R6-A | |
| stm32l152x8a | STM32L152C8-A, STM32L152R8-A, STM31L152V8-A | |
| stm32l152xba | STM32L152CB-A, STM32L152RB-A, STM31L152VB-A | |
| stm32l152xc | STM32L152CC, STM32L152QC, SRM32L152RC, STM32L152UC | |
| stm32l152xd | STM32L152QD, STM32L152RD, STM32L152VD, STM32L152ZD | |
| stm32l152xe | STM32L152QE, STM32L152RE, STM32L152VE, STM32L152ZE | |
| stm32l162xc | STM32L162RC, STM32L162VC | |
| stm32l162xd | STM32L162QD, STM32L156RD, STM32L162VD, STM32L162ZD | |
| stm32l162xe | STM32L162QE, STM32L156RE, STM32L162VE, STM32L162ZE | |
| stm32l052x6 | STM32L052K6, STM32L052T6, STM32L052C6, STM32L052R6 | |
| stm32l052x8 | STM32L052K8, STM32L052T8, STM32L052C8, STM32L052R8 | tested, default |
| stm32l053x6 | STM32L053C6, STM32L053R6 | |
| stm32l053x8 | STM32L053C8, STM32L053R8 | |
| stm32l062x8 | STM32L062K8 | |
| stm32l063x8 | STM32L063C8, STM32L063R8 | |
| stm32l072v8 | STM32L072V8 | |
| stm32l072xb | STM32L072KB, STM32L072CB, STM32L072RB, STM32L072VB | |
| stm32l072xz | STM32L072KZ, STM32L072CZ, STM32L072RZ, STM32L072VZ | |
| stm32l073v8 | STM32L073V8 | |
| stm32l073xb | STM32L073CB, STM32L073RB, STM32L073VB | |
| stm32l073xz | STM32L073CZ, STM32L073RZ, STM32L073VZ | |
| stm32l476xc | STM32L476RC, STM32L476VC | |
| stm32l476xe | STM32L476RE, STM32L476JE, STM32L476ME, STM32L476VE | |
| stm32l476xg | STM32L476RG, STM32L476JG, STM32L476MG, STM32L476VG | tested |
- Adjust your linker script to set correct ROM origin and ROM length
- put DFU_BOOTKEY on RAM top and make a software reset OR
- tie DFU_BOOTSTRAP_PIN on DFU_BOOTSTRAP_PORT low on startup
At this moment only binary files supported
To encrypt:
fwcrypt -e infile.bin outfile.bin
To decrypt:
fwcrypt -d infile.bin outfile.bin