Cryptography Operations - ST STM32CubeU5 TFM User Manual

5.4

Cryptography operations

The TFM_SBSFU_Boot application example is delivered with configurable cryptographic schemes (solution for
firmware authentication and firmware encryption):
• RSA-2048 asymmetric cryptography for image authenticity verification, AES-CTR-128 symmetric
cryptography with key RSA-OAEP encrypted for image confidentiality, and SHA256 cryptography for image
integrity check.
• RSA-3072 asymmetric cryptography for image authenticity verification, AES-CTR-128 symmetric
cryptography with key RSA-OAEP encrypted for image confidentiality, and SHA256 cryptography for image
integrity check.
• ECDSA-256 asymmetric cryptography for image authenticity verification, AES-CTR-128 symmetric
cryptography with key ECIES-P256 encrypted for image confidentiality, and SHA256 cryptography for
image integrity check.
For more information on the cryptographic scheme, refer to the
UM2851 - Rev 4
Cryptography operations
[MCUboot] open-source website.
UM2851
page 9/117