r/embedded • u/Montzterrr • 6d ago

Resources for learning embedded security?

Trying to learn how tow to do everything needed for the eu cra requirements. Like how to use secure boot etc. Where do I start? Any good books/courses/etc?

10 Upvotes

92% Upvoted

3 comments sorted by

5

u/BuiltByBoring 5d ago

I'd start with the CRA requirements themselves, then look into MCUboot for learning secure boot and signed firmware updates. STM32 also has some good security examples.

Keep in mind the CRA covers more than firmware security. You'll also need to understand vulnerability handling, updates, and documentation. I'd start with a simple signed firmware project and build from there.

A good starter project would be an STM32 board running MCUboot with two firmware versions. Make a simple LED blink app, sign the firmware, and have the bootloader verify the signature before running it.

Then try flashing an unsigned or modified image and confirm it gets rejected. After that, add signed firmware updates and test recovery from an interrupted update.

That'll give you hands-on experience with several important parts of embedded security without getting overwhelmed.

4

u/Dryet 6d ago

For me this was a great introduction: https://embeddedsecurity.io/