MSP430FR2433 Code Protection?

[hal9001]

Does MSP430FR2433 from TI offer code protection or fuses to burn so that others cant read back the firmware from the programming port? I read code protection for other MSP430s but dont see examples or information for MSP430FR2433. I'm using Code Composer and a launchpad board as programmer.

Cheers!

[hal9001]

In the slaa685 app report there are some hints but no example code.

On MSP430FR2xx/FR4xx devices, the JTAG signatures are located in the main area of FRAM at
addresses FF80h–FF83h (just like on other FRxx devices). The JTAG/SBW interface is locked without password by writing anything other than 00000000h or FFFFFFFFh to the JTAG signatures (this isdifferent from other FRxx devices).
To clear JTAG/SBW lock protection, the bootloader can be used to clear the JTAG signatures to
00000000h or FFFFFFFFh. The BSL is password protected and the last 32 bytes of the interrupt vector table (FFE0h–FFFFh) are used as the BSL password (see Section 4). Unlocking JTAG/SBW access can be easily performed with the BSL mass erase command on these FRAM devices, because the JTAG signatures are located in main memory (rather than some protected BSL area like on F5xx/F6xx).

Is this code enough to lock the JTAG signature? Does this have to be set to persistent memory?

Code: [Select]

uint16_t *jtag=0xFF80;
*jtag=0x1234;


[bson]

Yes, except you probably want to write all 32 bits:

Code: [Select]

   volatile uint32_t* jtag_lock = (volatile uint32_t*)0xff80;
   *jtag_lock = 0xc0ffee;


[mon2]

If someone wants the code bad enough, it can be extracted with some effort:

https://research.nccgroup.com/wp-content/uploads/2020/02/NCC-Group-Whitepaper-Microcontroller-Readback-Protection-1.pdf