SPRACQ1 May 2020 TMS320F28374D , TMS320F28374S , TMS320F28375D , TMS320F28375S , TMS320F28376D , TMS320F28376S , TMS320F28377D , TMS320F28377S , TMS320F28379D , TMS320F28379S , TMS320F28384D , TMS320F28384D-Q1 , TMS320F28384S , TMS320F28384S-Q1 , TMS320F28386D , TMS320F28386D-Q1 , TMS320F28386S , TMS320F28386S-Q1 , TMS320F28388D , TMS320F28388S
Dual Code Security Module (DCSM) has been enhanced on the F2838x devices to provide some additional feature. One major difference on the F2838x devices is that instead of each CPU subsystem having their own dual-zones (Zone1 and Zone2), there are only two zones and secure resources of all the CPU subsystems are allocated to these two zones. Only the security settings programmed in CPU1 USER OTP and CPU2 and CM USER OTP are available to program your application code or data.
Table 9 shows the new and enhanced security features on the F2838x devices.
Feature | Short Description | F2838x | F2837x |
---|---|---|---|
Dual Zone | Two independent security zone for 3rd party development | Only two zones on device and secure resources of all CPU subsystems are allocated to these two zones only. | CPU1 and CPU2 each have separate two zones |
Security Settings | Security Settings are programmed in USER OTP | All security settings are programmed in CPU1 USER OTP only. | CPU1 and CPU2 have security settings in their own USER OTP |
Default Password | All 4 x 32 bit password values are 0xFFFF_FFFF | ALL_1 password is invalid password and makes device unlock. TI programs few bits of CSMPSWD1 to 0. | ALL_1 password makes zone un-secure |
Number of valid Zone_Select_Block | Zone_Select_Block address is based on link pointer | 15 | 30 |
JTAGLOCK | Feature to disable the JTAG access on device | YES. Password based JTAGLOCK which user can unlock if needed. | NO |
SECURE BOOT | This BOOTMODE authenticate the user code before executing it. | YES | NO |
Secure MSG RAM | One MSG RAM block can be allocated to Zone1 or Zone2 | YES | NO |
CLA Security | CLA is like CPU and CLA registers are secure when executing secure code. | CLA can be made secure by allocating it to Zone1 or Zone2 |
In addition, the address mapping for different security configurations in CPU1 USER OTP on F2838x has changed. You have to make the appropriate changes to code while importing it from F2837x.