https://community.nxp.com/t5/S32K/s32k3-hse-basic-secure-boot-protect-problem/m-p/1943667#M40343 <P>Hi <a href="https://community.nxp.com/t5/user/viewprofilepage/user-id/234378">@victory</a>&nbsp;</P> <P>it depends on BOOT_SEQ:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_0-1724946115013.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296104i4FB748E17B58F17F/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_0-1724946115013.png" alt="lukaszadrapa_0-1724946115013.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_1-1724946120491.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296105iF64510D7A28697C8/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_1-1724946120491.png" alt="lukaszadrapa_1-1724946120491.png" /></span></P> <P>&nbsp;</P> <P>To check IVT GMAC, it's necessary to enable IVT_AUTH:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_2-1724946254679.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296106i810DFFCAF29EAB5E/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_2-1724946254679.png" alt="lukaszadrapa_2-1724946254679.png" /></span></P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_3-1724946261729.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296107i480300A8A0A3C8E1/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_3-1724946261729.png" alt="lukaszadrapa_3-1724946261729.png" /></span></P> <P>This eliminate problems with IVT changes.</P> <P>Regards,</P> <P>Lukas</P> Thu, 29 Aug 2024 15:46:20 GMT lukaszadrapa 2024-08-29T15:46:20Z https://community.nxp.com/t5/S32K/s32k3-hse-basic-secure-boot-protect-problem/m-p/1941089#M40159 <P>Hi Nxp,</P><P>&nbsp; &nbsp; i'm checking the hse basic secure boot function.&nbsp; i am wondering if it could be dis-functional (someone modified flash and run another program),&nbsp; here is my question:</P><P>1. if IVT set both CM7_0 and APPBL address, how MCU determine jump to CM7 start address or APPBL start address<SPAN>?</SPAN></P><P>2. is BSB activated by IVT BOOTSEQ bit, if not&nbsp; how to activated BSB?</P><P>3. how to enable HSE check IVT GMAC?</P><P>4. based on Q2, if someone changed the IVT, not set the BOOTSEQ bit, then he could run its own program, hse will not check ivt anymore?</P> Tue, 27 Aug 2024 08:26:48 GMT https://community.nxp.com/t5/S32K/s32k3-hse-basic-secure-boot-protect-problem/m-p/1941089#M40159 victory 2024-08-27T08:26:48Z https://community.nxp.com/t5/S32K/s32k3-hse-basic-secure-boot-protect-problem/m-p/1943667#M40343 <P>Hi <a href="https://community.nxp.com/t5/user/viewprofilepage/user-id/234378">@victory</a>&nbsp;</P> <P>it depends on BOOT_SEQ:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_0-1724946115013.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296104i4FB748E17B58F17F/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_0-1724946115013.png" alt="lukaszadrapa_0-1724946115013.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_1-1724946120491.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296105iF64510D7A28697C8/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_1-1724946120491.png" alt="lukaszadrapa_1-1724946120491.png" /></span></P> <P>&nbsp;</P> <P>To check IVT GMAC, it's necessary to enable IVT_AUTH:</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_2-1724946254679.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296106i810DFFCAF29EAB5E/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_2-1724946254679.png" alt="lukaszadrapa_2-1724946254679.png" /></span></P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="lukaszadrapa_3-1724946261729.png" style="width: 400px;"><img src="https://community.nxp.com/t5/image/serverpage/image-id/296107i480300A8A0A3C8E1/image-size/medium?v=v2&amp;px=400" role="button" title="lukaszadrapa_3-1724946261729.png" alt="lukaszadrapa_3-1724946261729.png" /></span></P> <P>This eliminate problems with IVT changes.</P> <P>Regards,</P> <P>Lukas</P> Thu, 29 Aug 2024 15:46:20 GMT https://community.nxp.com/t5/S32K/s32k3-hse-basic-secure-boot-protect-problem/m-p/1943667#M40343 lukaszadrapa 2024-08-29T15:46:20Z