Skip to content

SBSFU add rsa4096 #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 11 commits into
base: main
Choose a base branch
from

Conversation

Paul-Goulpie-Smile
Copy link

This patch adds RSA4096 key management to the SBSFU project.
It is related to the ST forum posts:
https://community.st.com/t5/stm32-mcus-security/secure-boot-rsa4096-stm32u5/m-p/784681

It requires downgrading the version of mcuboot included in the repository. The previous version was distributed without source code and prevented the integration of RSA4096 management changes into the imgtool utility.

Generates with this commands:
openssl genrsa -out SBSFU_Boot/Src/root-rsa-4096.pem    -traditional 4096
openssl genrsa -out SBSFU_Boot/Src/root-rsa-4096_1.pem  -traditional 4096
openssl genrsa -out SBSFU_Boot/Src/enc-rsa4096-priv.pem -traditional 4096
openssl rsa    -out SBSFU_Boot/Src/enc-rsa4096-pub.pem  -in SBSFU_Boot/Src/enc-rsa4096-priv.pem -pubout
@ALABSTM ALABSTM self-assigned this Apr 2, 2025
@ALABSTM ALABSTM added sbsfu SBSFU-related issue or pull-request enhancement New feature or request projects Projects-related (demos, applications, examples) issue or pull-request. labels Apr 2, 2025
@ALABSTM ALABSTM added mw Middleware-related issue or pull-request. mcuboot MCU Boot-related issue or pull-request and removed projects Projects-related (demos, applications, examples) issue or pull-request. sbsfu SBSFU-related issue or pull-request labels Apr 4, 2025
@ALABSTM
Copy link
Contributor

ALABSTM commented Apr 4, 2025

Hi @Paul-Goulpie-Smile,

Thank you for this other proposal. Regarding the mcuboot library, we provide a modified version that you can also fetch from this repository.

Now, it seems like this modified version lacks the ./scripts folder. I'll ask our development teams about this point and let you know once I have something new.

With regards,

@ALABSTM ALABSTM moved this from To do to Analyzed in stm32cube-mcu-fw-dashboard Apr 4, 2025
@ALABSTM ALABSTM added the internal bug tracker Issue confirmed and logged into the internal bug tracking system label Apr 15, 2025
@ALABSTM
Copy link
Contributor

ALABSTM commented Apr 15, 2025

ST Internal Reference: 207797

@ALABSTM ALABSTM moved this from Analyzed to In progress in stm32cube-mcu-fw-dashboard Apr 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request internal bug tracker Issue confirmed and logged into the internal bug tracking system mcuboot MCU Boot-related issue or pull-request mw Middleware-related issue or pull-request.
Projects
Status: In progress
Development

Successfully merging this pull request may close these issues.

2 participants