topic Using cst-tools signing *.out file in i.MX Processors

Using cst-tools signing *.out file

vijith_g1 — Thu, 09 Jul 2020 16:41:01 GMT

Hi,

I am using sbc connect core 6 board for my product development. I have to add security to my developed firmware application. Because we are planning to use secure update of the application firmware. For that we are planning to use cst-tools signing method. Please let me know using cst-tools can I sign the *.out file and verify in user space. Please let me know any other method ?

I am using Digi yocto build dey 2.4 version.

Thanks & Regards

Vijith G

Re: Using cst-tools signing *.out file

Yuri — Fri, 10 Jul 2020 07:55:07 GMT

vijith.g@honeywell.com

Hello,

I've sent You some comments directly.

Regards,

Yuri.

Re: Using cst-tools signing *.out file

vijith_g1 — Thu, 16 Jul 2020 09:32:41 GMT

I have some queries related to the document you have shared.

Verification and Authentication:

1: csf file where does come from?

2: In the machine authentication perform apart from signed image and srk efuse information is other any items to authenticate?

3: Document mentioned csf file to install certificates, in a machine which is not connected to internet, will this certificate installation happen?

4: Where will be Certifying authority (CA) in the authentication machine?

5: is csf file a signed application file?

Re: Using cst-tools signing *.out file

Yuri — Tue, 21 Jul 2020 03:41:47 GMT

Hello,

below are my comments.

1) The CSF file in the document is just an (typical) example.

2) Yes - usually only signed image and the fuses are checked.

3,4) Since root (SRK) is local - no need for I-net.
5) CSF is text file, which will be converted to binary form to be checked by boot ROM.

Regards,

Yuri.