nRF52832 Security, Secure Boot

RE: nRF52832 Security, Secure Boot

Simonr — Tue, 22 Jan 2019 09:41:53 GMT

No, it is not possible to make the nRF52832 "immune" to erasing the entire chip.

Best regards,

Simon

RE: nRF52832 Security, Secure Boot

tlgage — Mon, 21 Jan 2019 18:26:57 GMT

Great thanks for the info. Another security related question was hoping you could help me with. Is it possible to implement a truly immutable Bootloader? Essentially burning it in with no way to change it. I know there are things you can do such as making the flash non-read/writable and disabling SWD access using the APP_PROTECT register but it seems like you can always still erase the chip using the CTRL-AP access. It is my understanding that a truly immutable boot loader is not possible on this chip, and would just like to confirm that is indeed the case.

RE: nRF52832 Security, Secure Boot

Simonr — Mon, 21 Jan 2019 10:00:21 GMT

The ARM TrustZone Cryptocell 310 security subsystem is not available for the nRF52832. However we do have examples using the Infineon OPTIGA Trust X for hardware security with the nRF52832. Please take a look at this blog post for more info on this. Support for this is available in SDKs 15.0.0 and newer. If you are using another crypto chip it should be possible to make some kind of security measures, although we can not help you with making it.

Best regards,

Simon