CC3235S: CC3235S Certificate issue

HS FAE Germany

Part Number: CC3235S

Tool/software:

Hi,

customer have been trying to obtain a Code Signing Certificate for the CC3235S from a TI listed CA for some time. However, they found otu that since 21st June 21 certificates with RSA2048 bit keys are no longer ‘allowed’ and the CAs therefore no longer issue them.

Do we plan to support longer keys in future?

Regards, Holger

1 month ago

0 Shlomi Itzhak 1 month ago

TI__Guru 60855 points

Hi,

4k key is supported as part of the Servicepack so you should still be fine.

or are you referring specifically to device programming where the bootloader is invoked?

Shlomi

0 Jan D 1 month ago in reply to Shlomi Itzhak

Guru 78225 points

Hi Shlomi,

Just a comment Code Signing Certificate means certificate for safe boot - related to ROM bootloader.

Jan

0 Shlomi Itzhak 1 month ago in reply to Jan D

TI__Guru 60855 points

if this is ROM bootloader, then I will need to check but I do not think it is supported.

0 HS FAE Germany 1 month ago in reply to Shlomi Itzhak

TI__Mastermind 31460 points

Hi Shlomi,
Yes, he referring to device programming.

Regards Holger

0 Shlomi Itzhak 1 month ago in reply to HS FAE Germany

TI__Guru 60855 points

I will need to check since I don't think our bootloader can handle 4K keys.

0 Jan D 1 month ago in reply to Shlomi Itzhak

Guru 78225 points

Hi,

As far I know Shlomi is right and there is no easy way to overcome this limitation at current hardware (CC32xx, CC3230, CC3235).

There are two workarounds:

if your customer have proper code signing certificate, he can use expired certificate (because ROM bootlaoder does not check expiration time)
or can be used Vendor Device Authentication - see SWRU547A

Jan

Wi-Fi

Wi-Fi forum

CC3235S: CC3235S Certificate issue