RT1021: What security protections are there during boot: ROM and plugin?

[rshipman]

Hi

I remember reading something several months ago, about what security measures the RT1021/RT1050 ROM enables during boot, and that these same protections are extended to the plugin feature when it is running (because it is effectively part of the ROM boot process). I cannot find it now!

So my questions are:

1. What are the security measures that the ROM enables during boot? I don't mean encryption and authentication. I would like to know what else the ROM does. For example:
   1. Does it turn off some pin access, dma, areas of the memory map, JTAG/SWD access etc?
   2. Are there any anti-tamper measures?
   3. Does it defend against power analysis?
   4. Etc etc.
2. Are these same security measures in place when the boot plugin is being run?

Many thanks for your help.

Kind regards,

Ronnie

[kerryzhou]

Hi @rshipman ,

Thank you for your interest in the NXP MIMXRT product, I would like to provide service for you.
If not the encryption and authentication for the ROM XIP boot, I didn't find any other item that the ROM turn off something about the pin, or dma.
But about the JTAG/SWD access, we have an application note about the secure JTAG：
https://www.nxp.com/dohttps://www.nxp.com/docs/en/application-note/AN12419.pdfcs/en/application-note...
So, you can take the boot plugin as the normal security.
If you meet any issues when you use the boot plugin with secure, just kindly let me know.

Best Regards,

Kerry