MCU-PLUS-SDK-AM263PX: MCU-PLUS-SDK-AM263PX

Alejandro Ruiz

Part Number: MCU-PLUS-SDK-AM263PX

Tool/software:

I have a few questions regarding Keyring and security for the AM263Px Control Card:

1) Is there any persistent (non-volatile) storage of the keyring inside the HSM?

2) Prior to booting up, where is the keyring stored at rest (in the HSM or the SBL)?

3) From where does the keyring get retrieved for loading onto the Secure RAM?

4) How are secrets on the keyring encrypted?

0 Kier 4 months ago

Do you have the TIFS-MCU documentation?

0 Nikhil Dasan 4 months ago

Hi,

Alejandro Ruiz said:
Is there any persistent (non-volatile) storage of the keyring inside the HSM?

Keys from the keyring is stored in SRAM on HSM which is volatile and valid only for that power cycle

Alejandro Ruiz said:
2) Prior to booting up, where is the keyring stored at rest (in the HSM or the SBL)?

Keyring would be created as a certificate, which would be in R5 at the time of booting and sent to HSM when executing the application.

Alejandro Ruiz said:
) From where does the keyring get retrieved for loading onto the Secure RAM?

Keyring gets retrieved from the certificate sent from R5 core into HSM Secure RAM.

Alejandro Ruiz said:
How are secrets on the keyring encrypted?

Symmetric keys are encrypted and certificate is signed using the root of trust keys on the device.

Arm-based microcontrollers forum