MCUXpresso Secure Provisioning Tool中的主题 IMXRT1052 XIP Encryption Issue

IMXRT1052 XIP Encryption Issue

acallamp — Mon, 02 Dec 2024 02:14:37 GMT

May I ask the expert: RT1052+XIP encryption method? If I want to use the UID of the chip as the key without burning the fuse, which solution should I choose to encrypt and generate the image? Because I am worried that after burning the fuse, the chip cannot be reused. May I ask if there are any good methods for encryption. It is also beneficial for the factory to facilitate mass production.

Re: IMXRT1052 XIP Encryption Issue

marek-trmac — Mon, 02 Dec 2024 06:54:25 GMT

Hi,

"Encrypted mode with UID" => "BEE with OTPMK". The mode is available only for signed images, so it will require to burn fuses for signing.

You can always review, which fuses will be burnt in:

1) OTP Configuration dialog (use filter "Required")

2) Prior the write script is executed, the GUI tool first check the fuses in the processor and then displays all irreversible changes.

After the fuses burnt, the chip still can be used with the same keys. Fuse bit burnt to 1 cannot be reverted to 0 anymore.

> May I ask if there are any good methods for encryption
You need to decide, whether you need same flash content for all products. If yes, you need same key for all products and you must use user key. Using UID/OTPMK means each product uses different key, so flash content is different.

Re: IMXRT1052 XIP Encryption Issue

acallamp — Mon, 02 Dec 2024 07:41:26 GMT

HI：
Does MFGTOOL only support USB and have production software that supports UART？