Impossible to instantiate an encrypted communication between SE050 and IMXRT1170

stefanotatini — Fri, 13 Jan 2023 11:11:04 GMT

I am experiencing a problem with the project "se05x_getInfo" included in SDK for IMXRT1170 ( SDK_2_12_1_MIMRT1170-EVK.zip).
I was unable to instantiate an encrypted communication between SE050 and IMXRT1170.
I made several attempts by modifying some #define but in vain.
What changes are needed to do this?

--------------------------------------------------------------
Further information
The demo ends correctly but with an unencrypted connection.
Log
App :INFO :PlugAndTrust_v04.01.01_20220112
sss :INFO :atr (Len=35)
00 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 08
01 00 00 00 00 64 00 00 0A 4A 43 4F 50 34 20 41
54 50 4F
App :WARN :No SemsLite Applet Available.
sss :INFO :atr (Len=35)
00 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 08
01 00 00 00 00 64 00 00 0A 4A 43 4F 50 34 20 41
54 50 4F
sss :WARN :Communication channel is Plain.
sss :WARN :!!!Not recommended for production use.!!!
App :WARN :#####################################################
App :INFO :uid (Len=18)
04 00 50 01 DB E9 7D 68 11 87 D8 04 7F 8B DA 0F
68 80
App :WARN :#####################################################
App :INFO :Applet Major = 3
App :INFO :Applet Minor = 1
App :INFO :Applet patch = 0
App :INFO :AppletConfig = 6FFF
App :INFO :With ECDAA
App :INFO :With ECDSA_ECDH_ECDHE
App :INFO :With EDDSA
App :INFO :With DH_MONT
App :INFO :With HMAC
App :INFO :With RSA_PLAIN
App :INFO :With RSA_CRT
App :INFO :With AES
App :INFO :With DES
App :INFO :With PBKDF
App :INFO :With TLS
App :INFO :With MIFARE
App :INFO :With I2CM
App :INFO :Internal = 010B
App :WARN :#####################################################
App :INFO :Tag value - proprietary data 0xFE = 0xFE
App :INFO :Length of following data 0x45 = 0x45
App :INFO :Tag card identification data (Len=2)
DF 28
App :INFO :Length of card identification data = 0x42
App :INFO :Tag configuration ID (Must be 0x01) = 0x01
App :INFO :Configuration ID (Len=12)
00 04 A1 F4 45 88 4F 17 E5 19 C0 69
App :INFO :OEF ID (Len=2)
A1 F4
App :INFO :Tag patch ID (Must be 0x02) = 0x02
App :INFO :Patch ID (Len=8)
00 00 00 00 00 00 00 01
App :INFO :Tag platform build ID1 (Must be 0x03) = 0x03
App :INFO :Platform build ID (Len=24)
4A 33 52 33 35 31 30 32 31 45 45 45 30 34 30 30
BC 03 04 79 33 8D 18 10
App :INFO :JCOP Platform ID = J3R351021EEE0400
App :INFO :Tag FIPS mode (Must be 0x05) = 0x05
App :INFO :FIPS mode var = 0x00
App :INFO :Tag pre-perso state (Must be 0x07) = 0x07
App :INFO :Bit mask of pre-perso state var = 0x00
App :INFO :Tag ROM ID (Must be 0x08) = 0x08
App :INFO :ROM ID (Len=8)
2E 5A D8 84 09 C9 BA DB
App :INFO :Status Word (SW) (Len=2)
90 00
App :INFO :se05x_GetInfoPlainApplet Example Success !!!...
App :WARN :#####################################################
App :INFO :cplc_data.IC_fabricator (Len=2)
47 90
App :INFO :cplc_data.IC_type1 (Len=2)
D3 21
App :INFO :cplc_data.Operating_system_identifier (Len=2)
47 00
App :INFO :cplc_data.Operating_system_release_date (Len=2)
00 00
App :INFO :cplc_data.Operating_system_release_level (Len=2)
00 00
App :INFO :cplc_data.IC_fabrication_date (Len=2)
92 84
App :INFO :cplc_data.IC_Serial_number (Len=4)
06 06 88 99
App :INFO :cplc_data.IC_Batch_identifier (Len=2)
37 34
App :INFO :cplc_data.IC_module_fabricator (Len=2)
00 00
App :INFO :cplc_data.IC_module_packaging_date (Len=2)
00 00
App :INFO :cplc_data.ICC_manufacturer (Len=2)
00 00
App :INFO :cplc_data.IC_embedding_date (Len=2)
00 00
App :INFO :cplc_data.IC_OS_initializer (Len=2)
03 7F
App :INFO :cplc_data.IC_OS_initialization_date (Len=2)
8B 36
App :INFO :cplc_data.IC_OS_initialization_equipment (Len=4)
30 36 38 38
App :INFO :cplc_data.IC_personalizer (Len=2)
00 00
App :INFO :cplc_data.IC_personalization_date (Len=2)
00 00
App :INFO :cplc_data.IC_personalization_equipment_ID (Len=4)
00 00 00 00
App :INFO :cplc_data.SW (Len=2)
90 00
App :INFO :ex_sss Finished

Re: Impossible to instantiate an encrypted communication between SE050 and IMXRT1170

michaelsalfer — Fri, 27 Jan 2023 10:31:04 GMT

Hello,

please check the documentation https://www.nxp.com/docs/en/application-note/AN12450.pdf (EdgeLock SE05x Quick start guide with i.MX RT1060 and i.MX RT1170). In Section "6 Binding EdgeLock SE05x to a host using Platform SCP" the defines to be changed are shown to enable the encrypted channel for the demos and configure which keys are to be configured for the secure element demo board you have.

Kind regards,
Michael

Secure Authentication中的主题 Impossible to instantiate an encrypted communication between SE050 and IMXRT1170

Impossible to instantiate an encrypted communication between SE050 and IMXRT1170

Re: Impossible to instantiate an encrypted communication between SE050 and IMXRT1170