API for secure objects' origin

psvz — Wed, 28 Dec 2022 13:50:59 GMT

Hello

Could you please confirm how could I read or change the ORIGIN of a secure object (key) - I cannot find such API. I would like to read and/or inject this property with my keys:

enum SE05x_Origin_t Where was this object originated Values: kSE05x_Origin_NA = 0 Invalid kSE05x_Origin_EXTERNAL = 0x01 Generated outside the module. kSE05x_Origin_INTERNAL = 0x02 Generated inside the module. kSE05x_Origin_PROVISIONED = 0x03 Trust provisioned by NXP

Re: API for secure objects' origin

Kan_Li — Thu, 29 Dec 2022 01:51:34 GMT

Hi @psvz ,

I am sorry, but there is no API to inject this property, you may just read this with the help of readobject command, indeed it is one of the object attributes that is updated during applet runtime for Secure Objects of type AESKey, DESKey, HMACKey, ECKey and
RSAKey only and does not get updated for other object types.

Please kindly refer to https://www.nxp.com/docs/en/application-note/AN12413.pdf for more details.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

topic API for secure objects' origin in Secure Authentication

API for secure objects' origin

Re: API for secure objects' origin