Methods for securing code in JN5189

[Johnny9]

Does JN5189 support the ability to protect flash binary code using UID?
If it does, where can I find instructions on how to use it?

[EduardoZamora · Accepted solution]

Hello @Johnny9

Hope you are doing well.

According to the JN5189 User Manual, Chapter 7 Reset, Boot and Wakeup, Section 7.3.2 Code protection, the following features are provided to protect the access to the memory:

• SWD and JTAG control
• Configuration of memory protection mechanism (MPU), by the boot code, to minimize threats such as code injection

It is possible to restrict access to (or even disable) the ISP functionality, for instance in order to protect code in the flash. For more information on this, please consult Chapter 38 In-System Programming (ISP), Section 38.8 Usage restrictions.

Also, you may find some useful commands using DK6Programmer software by typing DK6Programmer.exe -s COMx --help

Regards,
Eduardo.

[Johnny9]

Hello Eduardo

Thank you for the reply.
I have additional questions.
Is the code protection feature that encrypts the off-chip flash memory contents available in JN5189?

Regards,
Johnny9.

[EduardoZamora]

Hi,

Are you planning to store your code in external flash? Is your project intended for a wireless application?

Regards,
Eduardo.

[Johnny9]

Hi

This project is intended for a wireless application, and it doesn't use external flash storage.
I am aware that methods such as IC decapsulation can potentially extract the binary data from the flash memory.
Encrypting flash binaries can enhance security and mitigate such threats.
Does the JN5189, which comes with built-in flash memory, offer support for flash encryption?

Regards,
Jonny9.

[EduardoZamora]

Hi,

The features provided to protect access to the memory should be the ones described in JN5189 User Manual, Section 7.3.2 Code protection and Section 38.8 ISP Usage restrictions.

Regards,
Eduardo.

[Johnny9]

Hi

Thank you for your response.

Regards,
Jonny9.