Introduction In connected products, security is no longer optional. Firmware updates, device identity, and data confidentiality all rely on robust cryptography implemented correctly on the target MCU. In this first part of my STM32 B-U585I-IOT02A security series, I focus on the cryptographic operations available when using the Secure Boot and Secure Firmware Update (SBSFU) solution on the STM32U5. This article follows the structure of my YouTube video and serves as a written reference with extra details and links. We’ll look at: The B-U585I-IOT02A board and SBSFU ecosystem AES hardware acceleration Hashing with SHA Public Key Infrastructure (PKI) concepts used by SBSFU How these crypto blocks support secure boot and firmware update Later videos and articles will go deeper into TrustZone , secure/non-secure boundaries , secure key storage , and attestation . 1. Platform Overview: STM32 B-U585I-IOT02A + SBSFU The B-U585I-IOT02A Discove...