4.3 Functional Description
4.3.1 Security Options
The CIP-51 provides security options to protect the flash memory from inadvertent modification by software as well as to prevent the
viewing of proprietary program code and constants. The Program Store Write Enable (bit PSWE in register PSCTL) and the Program
Store Erase Enable (bit PSEE in register PSCTL) bits protect the flash memory from accidental modification by software. PSWE must
be explicitly set to 1 before software can modify the flash memory; both PSWE and PSEE must be set to 1 before software can erase
flash memory. Additional security features prevent proprietary program code and data constants from being read or altered across the
C2 interface.
A Security Lock Byte located in flash user space offers protection of the flash program memory from access (reads, writes, or erases)
by unprotected code or the C2 interface. See the specific device memory map for the location of the security byte. The flash security
mechanism allows the user to lock "n" flash pages, starting at page 0, where "n" is the 1s complement number represented by the
Security Lock Byte.
Note:
The page containing the flash Security Lock Byte is unlocked when no other flash pages are locked (all bits of the Lock Byte are
1) and locked when any other flash pages are locked (any bit of the Lock Byte is 0).
Table 4.1. Security Byte Decoding
Security Lock Byte
111111101b
1s Complement
00000010b
Flash Pages Locked
3 (First two flash pages + Lock Byte Page)
The level of flash security depends on the flash access method. The three flash access methods that can be restricted are reads,
writes, and erases from the C2 debug interface, user firmware executing on unlocked pages, and user firmware executing on locked
pages.
Table 4.2. Flash Security Summary—Firmware Permissions
Permissions according to the area firmware is executing from:
Target Area for Read / Write / Erase
Unlocked User
Page
Locked User Page
Unlocked Data
Page
Locked Data Page
Any Unlocked Page
[R] [W] [E]
[R] [W] [E]
[R] [W] [E]
[R] [W] [E]
Locked Page (except security page)
reset
[R] [W] [E]
reset
[R] [W] [E]
Locked Security Page
reset
[R] [W]
reset
[R] [W]
Reserved Area
reset
reset
reset
reset
[R] = Read permitted
[W] = Write permitted
[E] = Erase permitted
reset = Flash error reset triggered
n/a = Not applicable
Table 4.3. Flash Security Summary—C2 Permissions
Target Area for Read / Write / Erase
Permissions from C2 interface
Any Unlocked Page
[R] [W] [E]
Any Locked Page
Device Erase Only
Reserved Area
None
EFM8SB2 Reference Manual
Flash Memory
silabs.com
| Smart. Connected. Energy-friendly.
Rev. 0.1 | 24