This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

LLD and Sample code for Security Accelerator in C6670



We are looking for a Sample program and associated LLD for the Security Accelerator module of the C6670 processor.

Our intention is to develop

1) A code which does 3GPP encryption/decryption (Using AIRCIPHER Engine) ,

2) Security key generation using HMAC-SHA256 algorithm.

But we could not find the SA sample programs in the PDK package

For running the L2 stack on the C6670 processor, the PDCP layer will have to do encryption/decryption and integrity protection/verification of the messages and the AIRCIPHER Engine in SA can do this.  Without SA LLD and software support, L2 stack can not be run on C6670 processor.

Can anyone help on this?

Thank you. 

  • Can anyone share an example for Security accelerator. 3GPP Air Cipher example is preferable

  • Hi,

    With pdk_C6670_1_1_0_3's Security Accelerator, how HMAC SHA 256 key  for 3GPP Integrity and Ciphering could be generated?

    Thanks

    Usha P

  • The SA LLD package includes 3GPP air-ciphering related example and unit test code. The SASS is designed to accelertae encryption and authentication operation for security protocols such as IPSEC, SRTP and 3GPP Air ciphering. It does not cover key generation, However, the TRNG and PKA module with SASS are provided to facilitate Key generation operation.

    Best regards,

    Eric

     

  • I forgot to mention that SA LLD is not part of the PDK or MCSDK package due to Export Control.  The latest SA LLD will be available at a seperate Webpage soon.

    Besides, the Security Accelerator Low Level Driver (SA LLD) requires encryption-enabled KeyStone devices or encryption-enabled KeyStone Evaluation Modules (EVMs).   It will not execute on KeyStone devices and EVMs that do not support the Security Accelerator (hardware-accelerated encryption).   For a list of the most current encryption-enabled KeyStone devices and EVMs, please contact your local TI sales representative. 

    Best regards,

    Eric

     

  • Hi Eric,

    Thanks for the information provided.

    When the latest SA LLD will be available, since we might be needing it in a week's time.

    Best Regards

    Usha P

  • Hi Eric,

    Does SA supports 3GPP Integrity Protection/Integrity Verification functionality?

    Best Regards

    Usha P

  • Hi, Usha:

    Yes, SA supports the following algorithms:
    - Kasumi-F8/F9
    - Snow3G-F8
    - AES-CTR
    - CMAC

    The Latest SA LLD 1.0.5.4 will be available soon, hopefully, within this week. I shall inform you when it is available.
    Do you have SA-enabled device or EVM?

    Best regards,

    Eric

     

     

     

  • Hi Eric,

    We will be getting SA enabled device (LXE).

    Currently we plan to develop/validate the Security related functions on the CCS Simulator and keep it ready for validation in the Target platform. I hope this SA LLD will work with the Simulator (just like other LLDs in the PDK/MCSDK). Please confirm.

    Best Regards,

    Usha P

  • Hi, Usha:

    Please note that the CCS simulator does not perform real encryption and authentication, the encryption opertaion is equivalent to NULL encryption, the authentication tag is fixed (0x10, 0x11, 0x12, and etc.). It is useful to verify the packet flow, but not the full system operation.

    Best regards,

    Eric

     

  • Hi, Usha:

    The latest SA LLD package is available at http://software-dl.ti.com/sdoemb/sdoemb_public_sw/salld/latest/index_FDS.html

    Best regards,

    Eric

     

  • Hi Eric,

    Thanks for the information provided. We could successfully download the SA LLD package for windows environment but unable to create SA projects. Please find below the list of  installation steps followed

    • Installed the package in C:/ti/salld_1_0_5_4/  folder
    • After successful installation, the directory structure is formed as below
    • Modified the PDK_INSTALL_PATH in sasetupenv.bat file and executed the batch file
    • Executed sabuild.bat and sabuildall.bat files
    • For creating CCS project for SA package, modified the “IS_SIMULATOR_SUPPORT_NEEDED” variable from no to yes and executed the batch file.
    • After execution of batch file, workspace is created but no projects are found. Please find the below snapshot for the same

    Any points/steps missed during this procedure?  If yes could you please let us know the sequence of steps to be followed?

    Thanks

    Best Regards

    Usha P

  • Hi Eric,

    Could you please verify whether the above procedure followed is correct?

    Best Regards

    Usha P

  • Hi, Usha:

    There is no need to rebuild the libraries unless you really want to.

    You need to follow the error messages to update the batch file until the project is created. For example, change "set CGT_VERSION=7.3.4" to "set CGT_VERSION=7.4.1"
    Please note that the simulator does not perform actual encryption and authentication. You will need C6670/C6678X EVM. Besides, the C6670/C6678 simulator may be too old to work as indicated at the SA release notes.

    Best regards,

    Eric