Doc ID024209 Rev 2

25/30

AN4240

Conclusion

7

Conclusion

To protect the cryptographic keys from software attacks, the control over those keys are

moved from the software domain to the hardware domain. The SPC564xB/C device is the

first ST device which offers the security features specified in the Secure Hardware

Extension (SHE) functional specification completely in hardware, offering a higher security

standard to OEM’s in the future when using this device.

The discussions and explanations in this document provide an overview of the features the

CSE module implements and how these features are used.

The three example codes show a mini-life cycle in order to load cryptographic keys, issue a

secure boot and encrypt and decrypt an image using two cipher modes, showing the

superiority of the CBC cipher mode against the ECB one.