topic Re: Is attestation already available in LPC55S69 in LPC Microcontrollers

Is attestation already available in LPC55S69

beze — Thu, 18 Jun 2020 15:03:37 GMT

Hello,

from university I got the LPC55S69-EVK to do some kind of "self attestation". So I should execute software within the secure environment which attests (calculates a HMAC for example) the untrusted memory region. My professor ment that this feature should be available on this board (in combination with trustzone) but i really could not find anything apart from the initial attestation api which does not seem like it really provides the functionality I am looking at. Has anyone ever heard or used this feature or do I need to implement it on my own ? It would be really helpful if anyone can help me.

Thanks in advance,
Lukas

Re: Is attestation already available in LPC55S69

Alice_Yang — Fri, 19 Jun 2020 04:08:48 GMT

Hello Lukas Petzi ,

About the basic features offered by TrustZone for Armv8-M and then explains the additional features of the LPC55S6x,

please have a look at "Chapter 47: LPC55S6x/LPC55S2x/LPC552x Trusted Execution Environment" of User Manual, download from:

https://www.nxp.com/webapp/sps/download/preDownload.jsp?render=true

And there are TrustZone demo based on LPC55s69 under MCUXpresso SDK:

Download SDK from:

https://mcuxpresso.nxp.com/en/select

Regards,

Alice

Re: Is attestation already available in LPC55S69

beze — Tue, 23 Jun 2020 09:19:59 GMT

Hello,
first of all thanks for your support. But unfortunalety I have seen this already. What I am looking for is a way of calculating a Hash or HMAC or whatever over the whole memory region of the "normal" world. This should be done by a trusted component so possibly a software stored within the secure world.

Kind regards,
Lukas

Re: Is attestation already available in LPC55S69

Alice_Yang — Tue, 30 Jun 2020 09:05:41 GMT

Hello Lukas,

You can config memory to secure or no-secure refer to your requirement.