topic Generate RSA fails, ssscli in Secure Authentication

Generate RSA fails, ssscli

psvz — Mon, 26 Dec 2022 11:36:20 GMT

SE050-E

root@raspberrypi:~ # ssscli generate rsa abc 4096 Generating RSA Key Pair at KeyID = 0x00000ABC, bits=4096 sss :INFO :atr (Len=35) 01 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 00 01 00 00 00 00 64 13 88 0A 00 65 53 45 30 35 31 00 00 00 ERROR:sss.keystore:sss_key_store_generate_key FAILED ERROR! Could not generate RSA Key Pair at KeyID 0x00000ABC

any idea?

Re: Generate RSA fails, ssscli

Kan_Li — Tue, 27 Dec 2022 03:31:05 GMT

Hi @psvz ,

RSA is not supported on SE050-E, please use SE051/SE050F instead for that purpose.

Sorry for the confusion that has caused.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

Re: Generate RSA fails, ssscli

psvz — Tue, 27 Dec 2022 11:24:18 GMT

@Kan_Li is it only for "generate" that isn't supported - can I inject my own RSA 4096 bits key? Besides, is there any EC-type key that SE050 can use to decrypt a message e.g., 25519 curve can be used for encrypt/decrypt (check Secret Key Encryption — PyNaCl 1.6.0.dev1 documentation) but you could use other EC keys for that...

Re: Generate RSA fails, ssscli

Kan_Li — Wed, 28 Dec 2022 02:52:09 GMT

Hi @psvz ,

No, I mean the RSA algorithms are not supported on SE050-E. You may generate an ECC Key pair instead for encrypt/decrypt purpose.

Have a great day,
Kan