topic Re: fast authentication tree ( Ca flag set ) iMx8m mini in i.MX Processors

fast authentication tree ( Ca flag set ) iMx8m mini

antonio_santagi — Mon, 02 Mar 2020 14:50:46 GMT

Hello,

I am following the CST Code Signing Tool guide paragraph 3.1.2.1 : running the hab4_pki_tree. script to create the Keys efuses bin data.

I don't know what I should answer to the question :

– Do you want the SRK certificates to have the CA Flag set?
– Answer ‘y’ for a standard tree, ‘n’ for fast authentication tree.

Is fast authentication tree supported by iMX8m mini processor ?

Is there a place where they explain what this fast authentication for PKI tree is ?

Can I answer yes even if at the beginning I answered no to the question "Do you want to use an existing CA key ?"

thank you

Re: fast authentication tree ( Ca flag set ) iMx8m mini

antonio_santagi — Tue, 03 Mar 2020 11:27:35 GMT

I think I found explanation here :

https://www.nxp.com/docs/en/application-note/AN4581.pdf at Appendix C.

It is a document not supposed to cover iMX8m mini but I seee it refers anyway to HABv4 so I guess the fast authentication explanation at Appendix C applies anyway.

Re: fast authentication tree ( Ca flag set ) iMx8m mini

Yuri — Tue, 10 Mar 2020 09:11:21 GMT

Hello,

Yes, the fast authentication is described in the Appendix C and i.MX8Mm supports

this feature.

Regards,

Yuri.