IAR strengthens security development workflow

1 min read

IAR Systems, the supplier of software tools and services for embedded development, has announced version 1.40 of the security development tool C-Trust, helping to further simplifying the implementation of security features into the development workflow.

New device support includes mainstream devices as well as Arm TrustZone for Arm Cortex-M devices from STMicroelectronics and NXP.

As embedded applications require additional security and companies attempt to try and meet ongoing changes in IoT device legislations, there is an increasing need to both protect the Intellectual Property (IP) and to ensure that product integrity is not compromised by counterfeiting and cloning during production.

C-Trust works as an extension to the development toolchain IAR Embedded Workbench and enables developers to build security into their applications, without having to master the deeper complexities of security, through the use of innovative Security Context Profiles.

A Security Context Profile defines the configuration of the trusted execution environment by describing the security environment that is required to protect an application - its properties include cryptographic keys and certificates, Secure Boot configuration, device security, application update process and policy, and device memory layout.

In addition to ready-made Security Context Profiles for IP protection, version 1.40 of C-Trust adds Security Context Profiles for production control. This new feature empowers developers to pre-define how many end products can be provisioned during production, preventing damaging cloning and counterfeiting.

“Our customers are telling us they are ready to start their transition into developing with security,” says Stefan Skarin, CEO and President, IAR Systems. “Security is their top priority, but there is also a frustration over the complexity of trying to implement security features. By providing integrated, simplified security development workflows with extended device support, we enable them to get started immediately, and reach a level of security that is sufficient as a starting point.”

C-Trust delivers security across the supply chain when coupled with the new Secure Desktop Provisioner by Secure Thingz, which has just been announced. Additionally, in the fast changing IoT market, there is a wide array of emerging security technologies in semiconductor devices. These technologies range from physical protection mechanisms in next generation devices, through to hardware memory enforcement techniques, plus the ability to design and deploy devices with keys and other secrets securely provisioned.

“Implementing security in advanced embedded devices is critical in meeting upcoming legislative requirements”, said Haydn Povey, CEO Secure Thingz. “The newly supported Arm TrustZone devices, coupled with our security tools, enable developers to rapidly deliver advanced applications with security from inception, providing the robustness and availability end users demand, and providing a secure foundation for the future of IoT.”