S32K3xx Secure Boot and Secure Debug

BhushanM — Tue, 28 Nov 2023 13:27:13 GMT

Hello Team,

For one of our product I need to support Secure Boot and Secure Debug feature.

1. Please recommend suitable option to choose as we have Boot Loader and Application code.

2. Whether going ahead with ADKP - GMAC based verification will also validate the Integrity and Authenticity of Bootloader and Application region or only bootloader region will be verified?

3. AES key provisioning demo code or app note is required incase going with SHE or Advanced Secure boot.

Thanks,

Bhushan

Re: S32K3xx Secure Boot and Secure Debug

lukaszadrapa — Wed, 29 Nov 2023 20:46:13 GMT

Hi @BhushanM

1. Advanced secure boot mode is recommended. This mode offers more regions to be checked, so you can configure it to cover both bootloader and application.
2. Basic secure boot mode can check one region only.
3. We provide Secure Boot application note including demo projects. It can be downloaded from:
https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-general-purpose-mcus/s32k3-microcontrollers-for-automotive-general-purpose:S32K3
Application note can be found here:
Documentation -> Secure Files -> Secure Boot Application note v0.1.1.0 (AN744511)
Associated demo project can be downloaded here:
Design Resources -> Software -> Secure Files -> SecureBootAppNoteDemo (SW745310)

And you can also check HSE examples in this package:
https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

Regards,
Lukas

topic S32K3xx Secure Boot and Secure Debug in S32K

S32K3xx Secure Boot and Secure Debug

Re: S32K3xx Secure Boot and Secure Debug