AM2752-Q1: Query on AES 256 bit CTR mode of Encryption and ECDSA P256

Ananth Gopalakrishnan said:

Please, clarify the AM275 shall support AES 256 bit CTR Mode and ECDSA (Secp256 r1) methods of crypto operation.

The SAxUL hardware accelerator supports these crypto operations.

Hi,

In that case, Harman AMP using AM275 soc shall support AES 256-bit CTR and ECDSA (Secp256 r1) method by default. Please double confirm.

Thank you.

Ananth Gopalakrishnan said:

Harman AMP using AM275 soc shall support AES 256-bit CTR and ECDSA (Secp256 r1) method by default.

I am not sure what exactly is meant by this. The support is there in the hardware but it may not be available in or leveraged by the software. The SDK provides examples for ECB, CBC modes so I believe it should be possible to integrate the support for CTR mode as well but the SDK cannot use the ECDSA as the PKA engine is open for general purpose usages and is reserved by TIFS for secure boot purposes.

Hi,

Sorry for multiple discussion. Let me share the use case below.

We have a customer requirement for SW Update; there the Encryption and signature verification shall be done using AES 256-bit CTR and ECDSA (Secp256 r1) method. Please clarify this can be supported in AM275.  

There is no software support available for these crypto algorithms.

Hi,

Please clarify in AM275, shall we use the AES 256 Bit CTR mode of encryption and ECDSA 256 signature method instead of existing methods of AES 256 Bit CBC and RSA 4K during secure boot?  

Your immediate response is highly appreciated!

I think a similar query has been raised on your private forum. Please check internally and continue the discussion on the private thread.

Hi,

Is it? i didn't initiate any discussion previously for such a query. Can you share the link? I'll check.

Ananth Gopalakrishnan said:

Is it? i didn't initiate any discussion previously for such a query. Can you share the link? I'll check.

The query is raised today possibly from your colleague. We usually don't share the private forum links on public forum. Could you please once check internally otherwise I will share the link.

Hi,

You are right, then please ignore mine and help to get the response for that soon.

Hi,

I came to know from my colleague for another thread response as

AES CTR and GCM are not support by TI secure boot.

ECDSA for signature is support. if this is the case, please proceed to close this.