CSEC S32K1

QJ_HAPPY — Mon, 28 Nov 2022 09:01:44 GMT

I want to ask how do I determine whether the key of CSEC is encrypted when I use CSEC, because I cannot perform factory settings, and how do I determine whether the key is encrypted?thanks

Re: CSEC S32K1

VaneB — Tue, 29 Nov 2022 23:42:52 GMT

Hi @QJ_HAPPY

Each key has 6 flag associated with it, one of these is Key Usage Flag (KEY_USAGE), that determines if a key is used for encryption/decryption or for CMAC generation/verification.
Regarding of how to return to the factory settings when CSE is enabled, the only way to restore it is with a mass erase, for this you need to run CMD_DBG_CHAL and CMD_DBG_AUTH commands to destroy the partition and then you can run mass erase. But if any CSEc key is ‘write-protected’ the above procedure will not work thus mass erase cannot be launched.

Take a look to these application notes, they will be useful for you.
Getting Started with CSEc Security Module

Production Flash Programming Best Practices for S32K1xx MCUs

B.R

VaneB

S32KのトピックRe: CSEC S32K1

CSEC S32K1

Re: CSEC S32K1