s32k3 hse basic secure boot protect problem?

[victory]

Hi Nxp,

    i'm checking the hse basic secure boot function.  i am wondering if it could be dis-functional (someone modified flash and run another program),  here is my question:

1. if IVT set both CM7_0 and APPBL address, how MCU determine jump to CM7 start address or APPBL start address?

2. is BSB activated by IVT BOOTSEQ bit, if not  how to activated BSB?

3. how to enable HSE check IVT GMAC?

4. based on Q2, if someone changed the IVT, not set the BOOTSEQ bit, then he could run its own program, hse will not check ivt anymore?

[lukaszadrapa · Accepted solution]

Hi @victory 

it depends on BOOT_SEQ:

To check IVT GMAC, it's necessary to enable IVT_AUTH:

This eliminate problems with IVT changes.

Regards,

Lukas