AM263P4: AM263px HS-SE test cases

Rapeti Sravanthi

Prodigy 165 points

Part Number: AM263P4

Hi,

I am trying few test cases in HS-SE LP

I changed kd_salt value (path and value) and tried to form certificate for SBL, Application and Keyring Certificate. It works fine for App and SBL, but not for Keyring Certificate. It prints error as Import Keyring failed, NACKed by HSM Server.
In debug mode, I am able to see HSM Secure RAM, containing of xMPKH keys, which is verified with the verify_has.csv(generated in sbl_keywiter). How do I verify AES keys, because in aes.key, it is not readable format and how do I cross-verify the values in HSM Secure RAM?

Thanks

Sravanthi R

16 days ago

0 Nilabh Anand 16 days ago

TI__Guru 50920 points

Hi,

I am not sure I understand the issue correctly,

You want to verify the aes keys from where?

0 Rapeti Sravanthi 15 days ago in reply to Nilabh Anand

Prodigy 165 points

Hi,

I am seeing aux symmetric keys in HSM Secure RAM,

I have given input in keys.json file i.e, aes.key(in non-readable format), how to verify this key in HSM Secure RAM

0 Nilabh Anand 12 days ago in reply to Rapeti Sravanthi

TI__Guru 50920 points

Hi,

Reading the keyring in plain text to verify the aes keys would not be secure.

While I do understand the need to verify the keys, we do not have such a mechanism today. We will plan for read of hash value from the secure RAM for key verification in the future.

jira.itg.ti.com/.../MCUREQ-4060

Regards

0 Rapeti Sravanthi 10 days ago in reply to Nilabh Anand

Prodigy 165 points

Hi Nilabh,

Rapeti Sravanthi said:
I changed kd_salt value (path and value) and tried to form certificate for SBL, Application and Keyring Certificate. It works fine for App and SBL, but not for Keyring Certificate. It prints error as Import Keyring failed, NACKed by HSM Server.

What do I do for this issue?

Regards