STM32 Bootloader

STM32 Bootloader

The Torrox STM32 CAN bootloader is a production-ready, configurable bootloader for STM32 microcontrollers from STMicroelectronics. It enables in-field firmware updates over the CAN bus or UART without needing JTAG/SWD access, debug hardware on site, or downtime for service technicians. Each binary is built to your exact project parameters and delivered with full documentation and all necessary tools.

A Production-Grade Alternative to ST’s System Bootloader

Every STM32 ships with a built-in system-memory bootloader from ST, suitable for factory flashing. For real products in the field, however, you typically need something different: a bootloader that runs on your own CAN protocol, integrates with your application’s safety requirements, and can be customised per project. That is what we deliver — a small, robust application-level bootloader built around your hardware.

Why Choose the Torrox STM32 Bootloader?

Fail-safe firmware updates. Every image is protected by a CRC
that is verified before the application is started. A partial or corrupted update will never run — the device always recovers into the bootloader. The design rationale is explained in our bootloader architecture post.

Compact footprint. The bootloader is small enough to leave the vast majority of flash free for your application, even on the entry-level STM32C0 series.

Tailored at compile time. Baud rate, CAN/FDCAN peripheral selection, GPIO pins, clock configuration and protocol options are set per project. You provide a parameter sheet, we deliver the binary plus documentation.

Built around modern STM32 hardware. Full support for FDCAN on STM32H7 and bxCAN on older targets, including correct handling of bit timing across the wide clock range these devices allow.

Tested host-side client included. A command-line tool for Windows, macOS and Linux ships with the bootloader, with support for common CAN-USB adapters. A linkable client library is available for integration into your own application.

Single-file production flashing. Bootloader and application can be merged into one hex file so that production lines only flash a single image. The story behind this tool is in our Bootloader in Production post.

Optional support for signed and encrypted firmware updates. The Cryptography Package allows to keep your firmware secret (IP protection) by providing encrypted firmware update packages. These packages can be passed to untrusted third parties without exposing the firmware, while still enabling those parties to perform updates of the installed firmware. By additionally signing the firmware and metadata, the bootloader guarantees that only firmware signed by an authorized party (you) will be installed and run (system integrity; secure boot).

The Cryptography Package ships with a tool to create encrypted firmware update packages and extra documentation.

Supported STM32 Families

The Torrox STM32 bootloader currently supports all variants of the following STM32 families:

• STM32C0 series (Arm Cortex-M0+, entry-level / value line)
• STM32H7 series (Arm Cortex-M7 / M4, high-performance)

Additional families (STM32G0, STM32G4, STM32L4, STM32U5, STM32WB and others) are on our roadmap. If your target device is not in the list above, contact us — adding a new family is a contained piece of work and we can usually give you a realistic timeline within a couple of days.

Documentation & Pricing

Read the STM32 Bootloader data sheet (PDF) for full technical details, find our Bootloader FAQ, or see the current price list. Working with C2000 instead? See our C2000 Bootloader.