stm32h743 signed DFU updates
The &quot;standard&quot; way is to sign your update with a private signing certificate and then validate that signature with the public key in your MCU-based system.
As I recall, some STM32 versions have built-in crypto hardware that supports RSA which would be a reasonable choice.