STM32U535NET6QTR datasheet(25/278 Pages) STMICROELECTRONICS

25 / 278 page

DS14217 Rev 1

25/278

STM32U535xx

Functional overview

3.4.2

Additional flash memory protections when TrustZone activated

When the TrustZone security is enabled through option bytes, the whole flash memory is

secure after reset and the following protections are available:

•

non-volatile watermark-based secure flash memory area

The secure area can be accessed only in Secure mode. One area per bank can be

selected with a page granularity.

•

secure HDP (hide protection area)

It is part of the flash memory secure area and can be protected to deny an access to

this area by any data read, write and instruction fetch. For example, a software code in

the secure flash memory hide protection area can be executed only once and deny any

further access to this area until next system reset. One area per bank can be selected

at the beginning of the secure area.

•

volatile block-based secure flash memory area

Each page can be programmed on-the-fly as secure or nonsecure.

3.4.3

FLASH privilege protection

Each flash memory page can be programmed on-the-fly as privileged or unprivileged.

Backup registers

0.5

Yes

N/A

Yes(2)

N/A(8)

Yes

N/A

N/A(8)

Yes

N/A

SRAM2/backup

RAM

0.5

Yes

N/A

Yes(2)

N/A(9)

Yes

N/A

N/A(9)

Yes

N/A

1. When the protection level 2 is active, the debug port and the bootloader mode are disabled.

2. Depends on TrustZone security access rights.

3. The system memory is only read-accessible, whatever the protection level (0, 1 or 2) and execution mode.

4. Option bytes are only accessible through the flash memory registers and OPSTRT bit.

5. The flash main memory is erased when the RDP option byte regresses from level 1 to level 0.

6. SWAP_BANK option bit can be modified.

7. OTP can only be written once.

8. The backup registers are erased when RDP changes from level 1 to level 0.

9. All SRAMs are erased when RDP changes from level 1 to level 0.

Table 4. Access status versus protection level and execution modes when TZEN = 1 (continued)

Area

RDP

level

User execution

(boot from flash memory)

Debug/ bootloader(1)

Read

Write

Erase

Read

Write

Erase

STM32U535NET6QTR 数据表(PDF) 25 Page - STMicroelectronics

STM32U535NET6QTR 数据表(HTML) 25 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

数据表下载