AM2634: Utilize Hardware Security Module (HSM) and MCRC Controller

Wenkai

Part Number: AM2634
Other Parts Discussed in Thread: SHA-256

Hi,

I was wondering how to use AM2634 HSM and MCRC modules to calculate SHA-256 and CRC32 values. There is not much talking about HSM in Technical Reference Manual and neither I could find related APPs and examples from Resource Explorer. Generally speaking, any recommendations of using TI APIs to efficiently calculate SHA256 / CRC32 for AM2634 device?

Thanks,

Wenkai

over 2 years ago

0 Prasad Jondhale over 2 years ago

TI__Mastermind 27743 points

Hi Wenkai,

Can you please check if below helps?

https://e2e.ti.com/support/microcontrollers/arm-based-microcontrollers-group/arm-based-microcontrollers---internal/f/arm-based-microcontrollers---internal-forum/1129909/am2634-q1-hsm-document-and-my-secure-resources-linkage-for-am263x-hsm-softwares/4192166#4192166

Regards,

Prasad

0 Wenkai over 2 years ago in reply to Prasad Jondhale

Prodigy 180 points

It said: "Unfortunately, the page you've requested no longer exists".

0 Prasad Jondhale over 2 years ago in reply to Wenkai

TI__Mastermind 27743 points

My apologies. You can access using below link -

(+) AM2634-Q1: HSM document and My secure resources linkage for AM263x HSM softwares - Arm-based microcontrollers forum - Arm-based microcontrollers - TI E2E support forums

0 Wenkai over 2 years ago in reply to Prasad Jondhale

Prodigy 180 points

Still no idea how to access MySecureSW - where is the form link?

0 Chester Gillon over 2 years ago in reply to Wenkai

Guru 92251 points

Wenkai said:
where is the form link?

The https://www.ti.com/product/AM2634-Q1 product page has:

Request more information

Functional safety advanced documentation is available for AM263x. Request now

Security advanced documentation is available for AM263x. Request now

Is it the 2nd link above you are looking for?

0 Wenkai over 2 years ago in reply to Chester Gillon

Prodigy 180 points

I am looking for HSM related documentation, is it the 2nd link?

0 Aakash Kedia over 2 years ago in reply to Wenkai

TI__Mastermind 25795 points

Hi Wenkai,

The HSM related documentation is part of Security Advanced Documentation which is the second link.
You will receive the requested information once you fill the form and you are granted the access.

Link to mySecureSoftware will be received via email which you have mentioned in the form.

Hope that helps.

Best Regards,
Aakash

0 Wenkai over 2 years ago in reply to Aakash Kedia

Prodigy 180 points

Thanks! I did fill out the form and submitted it, waiting for the link email now.

0 Wenkai over 2 years ago in reply to Wenkai

Prodigy 180 points

So HSM is only available to HS-SE device, but not for HS-FS device, correct?

0 Aakash Kedia over 2 years ago in reply to Wenkai

TI__Mastermind 25795 points

Hi Wenkai,

Can you please clarify what do you mean by "HSM is only available to HS-SE device, but not for HS-FS device." ?

HSM core and TIFS-MCU Firmware is available for both HS-FS device and HS-SE device.

For HS-FS device, the TIFS-MCU Firmware will be default firmware delivered as apart of MCU_PLUS_SDK and it cannot be modified by the user.
For HS-SE device, the TIFS-MCU Firmware will be delivered as an extension to MCU_PLUS_SDK release for the HSMRt development by the user.

The security(in hardware) offered by each device differs as HS-SE device will be classified more secure than HS-FS device.

Note: Access to Hardware Cryptography will be available to the application cores for both HS-FS devices and HS-SE devices.

Hope this information helps. If not, can you please clarify the question, so that I can support you better on this ?

Best Regards,
Aakash

0 Wenkai over 2 years ago in reply to Aakash Kedia

Prodigy 180 points

Hi Aakash,

I thought only HS-SE can use HSM hardware cryptography and you already answered that question.

I only have interests in HSM hardware cryptography function for computing SHA-256 or SHA512. I assume TIFS_MCU firmware provides APIs to do SHA-256 calculation, correct? My application will be running on Core0 R5F and to be able to use HSM hardware cryptography, what I need to do is just utilize API functions from TIFS package? Is there a separate booting process for core M4F which HSM module is located at?

Thanks,

Wenkai

0 Aakash Kedia over 2 years ago in reply to Wenkai

TI__Mastermind 25795 points

Hi Wenkai,

Access to Hardware Cryptography is closed by default for both the device types. TIFS-MCU firmware for HS-FS and HS-SE opens the firewall during its initialization for the user to access the Hardware Cryptography directly. As a part of MCU_PLUS_SDK, the DTHE and PKA drivers will be available in 8.4.1 release of MCU_PLUS_SDK.

Booting process -

By default ROM boots the R5 SBL and waits for R5 SBL to send a TIFS-MCU firmware image to the ROM.

You will find the same in sbl_qspi main code -

**Note - For now, the function only loads the HS-FS firmware only, due to unavailability of HS_FS firmware. But this will be available in 8.4.1 release of MCU_PLUS_SDK.

0 Wenkai over 2 years ago in reply to Aakash Kedia

Prodigy 180 points

So what is approximate release date of MCU_PLUS_SDK 8.4.1?

Also noticed this executable file "tifs_am263x_08_03_00_05-windows-x64-installer.exe" from download site, is it for core M4F MCU firmware downloading?

0 Aakash Kedia over 2 years ago in reply to Wenkai

TI__Mastermind 25795 points

Hi Wenkai,

The release date of MCU_PLUS_SDK 8.4.1 is planned by the end of October.

Yes, the software build is for the TIFS-MCU (HSMRt) which will be executed on HSM M4. The release caters to HS-SE devices, so you will need to convert your device to HS-SE device using the otp_keywriter tool.

Hope that helps.

Best Regards,
Aakash

0 Wenkai over 2 years ago in reply to Aakash Kedia

Prodigy 180 points

We'd like to keep the device as HS-FS - is the HSM M4 firmware available for HS-FS so we don't need to convert it to HS-SE?

+1 Aakash Kedia over 2 years ago in reply to Wenkai

TI__Mastermind 25795 points

Hi Wenkai,

In case, you require HS-FS firmware for AM263x, I suggest you to wait till 8.4.1 release which will have first official release of the same.

!! IMPORTANT !!

HS-FS firmware will be delivered by TI in encrypted format and source code will not be shared with the customers. Hence, the access to source code or M4F(HSM) core in case of HS-FS is not supported by TI. The TIFS-MCU package is only valid for HS-SE devices.

Best Regards,
Aakash

0 Wenkai over 2 years ago in reply to Aakash Kedia

Prodigy 180 points

Thanks Aakash!