Private keys for NXP-provisioned public counterparts

psvz — Thu, 01 May 2025 22:32:24 GMT

After factory reset of my SE051H I can see quite a few public keys that cannot be removed:

Key-Id: 0X7fff0204 NIST-P (Public Key) Size(Bits): 256 Key-Id: 0X7fff020b NIST-P (Public Key) Size(Bits): No Info available Key-Id: 0X7fff0210 NIST-P (Public Key) Size(Bits): 256 Key-Id: 0X7fff0211 NIST-P (Public Key) Size(Bits): 256

Particularly, I am curious about "0x7FFF0204 EC Key Used for applet personalization" that seems to allow the private component's holder to ruin the chip effectively. So, who has that private component? Can I get it? Can I disable personalization?

Re: Private keys for NXP-provisioned public counterparts

Kan_Li — Thu, 08 May 2025 06:02:35 GMT

Hi @psvz ,

Those keys are trust provisioned by NXP , and they are not affected by the deleteall command. 0x7FFF0204 is Applet Feature Management Key, which is created and owned by NXP.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

topic Re: Private keys for NXP-provisioned public counterparts in Secure Authentication

Private keys for NXP-provisioned public counterparts

Re: Private keys for NXP-provisioned public counterparts