AM3359: Secure Code

Cazaban Laurence

Expert 1500 points

Part Number: AM3359

Hello Everyone,

First of all, I would like to introduce you what is the subject I'm working on.

In fact, my company is developing control motor to asserve the movement of differents axis on a big cutting machine.

The code that asserve each movement is embedded in a processor Texas Instrument: an AM3359.

We want to protect this code because we are attacked by our competitors who want to copy or duplicate our code.

That's why code security is a very important subject we are working on now.

We have seen lots of companies that develop solutions to secure the code embedded in a micro processor.

The main problem that appears is that we have to find and provide a unique identification number for each AM3359 that is embedded on our board.

Is it possible to have this unique identification number ? Can you explain me how ?

Thanks a lot for your help.

Laurence

over 5 years ago

0 Hong Guan64 over 5 years ago

TI__Guru* 75710 points

Hi Laurence,
There's a unique number per device on AM335x High Security (HS) device.
You'll find useful information on TI Sitara High Security (HS) device from links below:
1. Sitara SoC security features:
www.ti.com/.../spry303d.pdf
2. Sitarra SoC secure boot:
www.ti.com.cn/.../spry305a.pdf

For more detailed information on secure SDK, EVM, collaterals, it is required to have secure NDA in place.

Please Fill out a request for a secure NDA.

Best,

-Hong

0 Cazaban Laurence over 5 years ago in reply to Hong Guan64

Expert 1500 points

Hello Hong,

Thanks for your answer.

I have read the documents you send me but I still don't know where and how to get this unique number on AM3359.

Can you telle me how to do please ?

Thanks a lot for your help

Laurence

0 Hong Guan64 over 5 years ago in reply to Cazaban Laurence

TI__Guru* 75710 points

Hi Laurence,
On all Sitara High Security (HS) devices, there's a Key Encryption Key (KEK) which is a random key.
One option is to derive a key from KEK for a unique key per device.
For further details on secure SDK, HS collaterals..., please fill out request per my last reply.
Best,
-Hong

0 Cazaban Laurence over 5 years ago in reply to Hong Guan64

Expert 1500 points

Hello Hong,

I have filled the request for DNA and I'm still waiting an aswer.

I think I will have all the answers I need ( how to derive a unique key from KEK) in the documentation when the demand will be accepted.

I will certainly contact you on this subject at this moment.

Thanks a lot foru your help

Laurence

0 Cazaban Laurence over 5 years ago

Expert 1500 points

Part Number: AM3359

Good morning,

Following your advice, we tried to complete the NDA in order to get more information for getting the Unique code on the AM3359 but we didn't get any feedback on the NDA.

Then, could you check what is the problem ? We really need to get more information on this topics.

Thank you for your support,

0 Hong Guan64 over 5 years ago in reply to Cazaban Laurence

TI__Guru* 75710 points

Hi Laurence,

Have you received the email sent from TI team?

Subject: Re: TI support CS0339851- TI REQUEST: MANUAL REVIEW –TMDXEVM437X-SECUREBOOT

Sent: Fri 12/4/2020 2:52 PM

Best,

-Hong

Processors

Processors forum

AM3359: Secure Code