[Security] CSEC_MASTER_ECU Key import

Gideon — Sat, 23 Mar 2024 06:40:48 GMT

Dear NXPs：

In the example of S32DS, in order to import ECU_MASTER_KEY, set the empty key value to 0xFF. csec_utils.c

/* AuthId is the MASTER_ECU key */ uint8_t g_emptyKey[16] = {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF};

uint8_t g_authIdKey[16] = {0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f};

csec_key_id_t g_authId = CSEC_MASTER_ECU;

So does the value of g_emptyKey have to be set to 0xFF in NXP?

Re: [Security] CSEC_MASTER_ECU Key import

lukaszadrapa — Wed, 27 Mar 2024 12:54:30 GMT

Hi @Gideon

yes, if a key is empty, 'all 1s' should be used. It's mentioned in the S32K1 reference manual:

and also in application note AN5401:

Regards,

Lukas

topic [Security] CSEC_MASTER_ECU Key import in S32K

[Security] CSEC_MASTER_ECU Key import

Re: [Security] CSEC_MASTER_ECU Key import