Skip to content

Integrate meta-seconorth-distro/add_recipe_for_plug-and-trust_mini_package

GitBot requested to merge integrate/meta-seconorth-distro/add_recipe_for_plug-and-trust_mini_package/into/kirkstone into kirkstone

Commit: seco-ne/yocto/layers/meta-seconorth-distro@1c78b97a

security: Extend AES key example for SE05x (plug&trust MW mini package)

New functions:

  • setaeskey: Read key file and inject key with aes policies
  • decryptaes: Use a aes key stored in the SE to decrypt a given input file

Limitations:

  • The decryption can only handle input files smaller or equal 512 bytes
  • The decryptaes function can not handle salted input files
  • The address issue is still present (see previous commit)

The example is only intended to show the se05x API usage and has multiple security issues. Therefore, do not use this example in productive cases.

BCS 746-001187

--

Commit: seco-ne/yocto/layers/meta-seconorth-distro@306ad536

security: Add AES key example for SE05x (plug&trust MW mini package)

The app provides the functions to:

  1. setkey: Read text file and inject a key at a specified address
  2. getkey: Read out key from a specified address and write it to a file
  3. erasekey: Erase a key at a specific address

Currently it is not possible to use all addresses of the SE. This is due to get_handle requests failing on some addresses. It looks like this is a build configuration issue, since the get_handle requests work when using the yocto default configuration of the full package.

BCS 746-001187

--

Commit: seco-ne/yocto/layers/meta-seconorth-distro@119ddb07

security: Add recipe for plug and trust middleware mini package

The package provides APIs for se05x Secure Element ICs. At the moment the recipe compiles the example provided by NXP.

BCS 746-001187

Merge request reports