S32KのトピックRe: S32K CSEC M1 to M3

S32K CSEC M1 to M3

wanglijun — Mon, 19 Apr 2021 12:40:11 GMT

Hello,

When calculating the M1 to M3, there is a parameter "key updated counter".

If the key update counter is wrong, can the key be loaded successfully?

Re: S32K CSEC M1 to M3

lukaszadrapa — Tue, 20 Apr 2021 05:56:03 GMT

Hi,

the answer is no. This behavior is required by SHE specification, it adds protection against replay attacks.

Regards,

Lukas

Re: S32K CSEC M1 to M3

wanglijun — Tue, 20 Apr 2021 06:22:58 GMT

Hello, Do you mean the input parameter key update counter must be equal to the actual key updated counter, if the 2 value is not equal, the key update not successfully, right?

Re: S32K CSEC M1 to M3

lukaszadrapa — Tue, 20 Apr 2021 06:54:23 GMT

No, new counter needs to be incremented (+1). Initial value of the counter is 0 (this is given by SHE, considering new device or device reset to factory state). When you are going to load the key first time, you use counter = 1. When you are going to update the key second time, use counter = 2 and so on. If you do not follow this rule, the key won't be updated.

Regards,

Lukas

Re: S32K CSEC M1 to M3

wanglijun — Tue, 20 Apr 2021 07:04:17 GMT

Hello, Thank you for the reply. Can you share that how to prevent replay attach by the counter? Thank you!

Re: S32K CSEC M1 to M3

lukaszadrapa — Tue, 20 Apr 2021 08:45:26 GMT

There's nothing to share, implementation of the counter itself is the protection.

Regards,

Lukas