Memory protection strategy

PM0051

14/27

Doc ID 14614 Rev 3

3

Memory protection strategy

The STM8 devices feature several mechanisms allowing to protect the content of the Flash

program and data EEPROM areas:

●

Readout protection

The software can prevent application code and data stored in the Flash program

memory and data EEPROM from being read and modified in ICP/SWIM mode. The

readout protection is enabled and disabled by programming an option byte in

ICP/SWIM mode. Refer to Section 3.1 for details.

●

User boot code area (UBC)

In order to guaranty the capability to recover from an interrupted or erroneous IAP

programming, all STM8 devices provide a write-protected area called user boot code

(UBC). This area is a part of the Flash program memory which cannot be modified in

user mode (that is protected against modification by the user software). The content of

the UBC area can be modified only in ICP/SWIM mode after clearing the UBC option

byte.

The size of the user boot code area can be configured through an option byte by

increments of one page.

Refer to Section 3.2 for details on user boot code area.

●

Unwanted memory access protection

All STM8 devices offer unwanted memory access protection, which purpose is to

prevent unintentional modification of program memory and data EEPROM (for example

due to a firmware bug or EMC disturbance).

This protection consists of authorizing write access to the memory only through a

specific software sequence which is unlikely to happen randomly or by mistake. Access

to Flash program and data EEPROM areas is enabled by writing MASS keys into key

registers.

Refer to Section 3.3 for details on unwanted memory access protection.

3.1

Readout protection

The readout protection is enabled by writing 0xAA in the ROP option byte. It is disabled by

reprogramming the ROP option byte with any value except for 0xAA and resetting the

device.

The readout protection can only be disabled in ICP/SWIM mode.

When the readout protection is selected, reading or modifying the Flash program memory in

ICP mode (using the SWIM interface) is forbidden. When available, the data EEPROM

memory is also protected against read and write access through ICP.

Erasing the ROP option byte to disable the readout protection causes the Flash program

memory, the DATA area and the option bytes to be erased.

Even though no protection can be considered as totally unbreakable, the readout protection

feature provides a very high level of protection for general purpose microcontrollers. Of

course, a software that allows the user to dump the Flash program memory content make

this readout protection useless. Table 8 describes possible accesses to each memory areas

versus the different modes and readout protection settings.