STM32Trust security framework

Secure boot
Ability to ensure the authenticity and integrity of an application that runs inside a device

Audit/Log
Keep trace of security events in an unchangeable way

Secure Install/Update
Installation or update of firmware with initial checks of integrity and authenticity before programming

Identification / Authentication / Attestation
Unique identification of a device and/or software package, and ability to detect its authenticity, from inside the device or externally

Secure Storage
Ability to securely store secrets like data or keys (and to access them without them being visible externally)

Silicon Device Lifecycle
Control states to securely protect silicon-device assets through a constrained path

Isolation
Isolation between trusted and non-trusted parts of an application

Software IP Protection
Ability to protect a section or the whole software package against external or internal reading. Can be multi-tenant

Abnormal situations handling
Ability to detect abnormal situations (both hardware and software) and to take adapted decisions like the removal of secret data

Secure Manufacturing
Initial device provisioning in unsecured environment with overproduction control. Potential secured personalization

Crypto Engine
Ability to process cryptographic algorithms, as recommended by a security assurance level

Application Lifecycle
Define unchangeable incremental states to securely protect application states and assets