Does CRP restrict IAP Flash entry points, i.e. can the application program the Flash even when CRP is enabled?

[lpcware-support]

You can still use IAP when CRP is enabled. See AN10851 Using Code Read Protection in LPC1700 for details:

AN10851: CRP example with source code​