SWD protection on nRF51822

RE: SWD protection on nRF51822

Davide — Fri, 27 May 2016 12:47:30 GMT

Thanks. Davide.

RE: SWD protection on nRF51822

run_ar — Fri, 27 May 2016 12:37:39 GMT

Yes, it is possible to erase everything to program the chip with your own firmware.

RE: SWD protection on nRF51822

Davide — Tue, 24 May 2016 13:42:48 GMT

Thanks. And (at least on nRF51), since NVMC is enabled, is it possible to issue an ERASEALL and erase all the flash? Making it possible to reprogram all the chip with own firmware?

RE: SWD protection on nRF51822

run_ar — Tue, 24 May 2016 12:49:08 GMT

Please refer to the nRF51 product specification Chapter 9.1 to see how the MPU works:
Protect all (PALL) is configured by writing '0' to UICR.RBPCONF.PALL. When protect all is enabled, the debugger (SWD) will no longer have access to code region 0, code region 1, RAM or any peripherals except for the following:

The NVMC peripheral.
The RESET register in the POWER peripheral.
The DISABLEINDEBUG register in the MPU peripheral.

Note that the behavior is changed in the nRF52 where the access port is either disabled (0xFF) or enabled (0x00): Access port protection can only be disabled by issuing an ERASEALL command via CTRL-AP. This command will erase the Flash, UICR, and RAM.

RE: SWD protection on nRF51822

SRA — Mon, 23 May 2016 17:08:08 GMT

Can't answer for nRF51, although of course other M0 chips have true SWD perm lockouts. I know the flaw you are referencing, and I'm not sure if Nordic ever addressed it. I'm not sure but I doubt the nRF52 being on a more advanced M4 core has the same issue, I haven't looked yet.

So whatever answer you get, I'd be interested in the same was true for the nRF52.