Facing issue while installing SMR#0 for SHE based secure boot

AniketPatil — Mon, 06 May 2024 13:38:16 GMT

I am using SHE based secure boot. For this purpose, I have loaded BOOT_MAC_KEY to secure NVM and then trying to install the SMR#0 but getting negative response (HSE_SRV_RSP_INVALID_PARA) from HSE.

Following configurations has been done for SMR#0:

hseSmrEntry_t sheSmrEntry	Configuration
configFlags	HSE_SMR_CFG_FLAG_INSTALL_AUTH
pSmrDest	0u
checkPeriod	0u
pSmrSrc	address of application (i.e., 0x40_1000)
smrSize	Size of application (i.e., 0x3000)
authKeyHandle	GET_KEY_HANDLE(HSE_KEY_CATALOG_ID_NVM, 0, 1)
pInstAuthTag	NULL_PTR
authScheme.macScheme.macAlgo	HSE_MAC_ALGO_CMAC
authScheme.macScheme.sch.cmac.cipherAlgo	HSE_CIPHER_ALGO_AES
smrDecrypt.decryptKeyHandle	HSE_SMR_DECRYPT_KEY_HANDLE_NOT_USED
versionOffset	HSE_SMR_VERSION_NOT_USED

hseSmrEntryInstallSrv_t	Configuration
accessMode	HSE_ACCESS_MODE_ONE_PASS
entryIndex	0u
pSmrEntry	address of sheSmrEntry
pSmrData	sheSmrEntry.pSmrSrc
smrDataLength	sheSmrEntry.smrSize
pAuthTag	NULL_PTR
authTagLength	0u

controller in use S32K312

can anyone please help me out with this. Thanks in advance

Re: Facing issue while installing SMR#0 for SHE based secure boot

lukaszadrapa — Fri, 10 May 2024 11:55:45 GMT

Hi @AniketPatil

as I already wrote in parallel ticket, I can see no problem in those parameters. Please try to compare all the details with this SW example which works:

c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Secure_Boot\S32K344_Hse_SHE_SecureBoot_Example\S32K344_Hse_SHE_SecureBoot\src\main.c

Regards,

Lukas

topic Facing issue while installing SMR#0 for SHE based secure boot in S32K

Facing issue while installing SMR#0 for SHE based secure boot

Re: Facing issue while installing SMR#0 for SHE based secure boot