S32KのトピックRe: SHE-key attribute flags

SHE-key attribute flags

ale_di_vi — Mon, 09 Oct 2023 15:11:39 GMT

Hi,

I'm working in a project having the CSEc module (microcontroller S32K144). I know that, in order to update SHE-keys, 5 flags must be configured in order to generate the key in the M-format (Write Protection, Boot Protection, Debugger Usage Protection, Wildcard Protection and Key Usage Flag).

In some documents, I read also about Verify Only flag: if set when the key is used for CMAC, it can be used only to verify CMAC, otherwise the key can be used for verification and generation.

The question is: the flags are actually 5? what about the Verify Only flag?

Thank you in advance

Re: SHE-key attribute flags

lukaszadrapa — Tue, 10 Oct 2023 09:45:16 GMT

Hi @ale_di_vi

This is an extension to SHE specification. Search for "SFE" keyword (Security Flag Extension) in the reference manual and in the application note AN5401. This is a screenshot from the reference manual, description of Program Partition command:

If you don't want to use this extension, just keep SFE as 0 when running Program Partition command.

Regards,

Lukas

Re: SHE-key attribute flags

ale_di_vi — Mon, 16 Oct 2023 14:48:46 GMT

Ok, now it is clear.
Many thanks!