LPC55xx certificate:why so many RoT keys?

cancel
Showing results for 
Search instead for 
Did you mean: 

LPC55xx certificate:why so many RoT keys?

140 Views
Contributor II

Hi sir,

I am reading the AN12283 on LPC55xx certificate verification.

pastedImage_1.png

I want to know if the RoT keyx in the picture means the public key in the root CA certificate?

If so, why so many key slots? Isn't it only one root certificate and only one root key?

Thanks for help!

Wenchuan

Labels (1)
Tags (1)
0 Kudos
5 Replies

3 Views
NXP TechSupport
NXP TechSupport

Wenchuan Yan,

>>I want to know if the RoT keyx in the picture means the public key in the root CA certificate?

Yes, RoT keyx is public key.

>>If so, why so many key slots? Isn't it only one root certificate and only one root key?

in case the Key0 private key is leaked, key0 public is no longer usable. in this case, we can use other keys.

It's true one key0 can work for this function. if you don't need other keys, just set them as 0.

BTW, what application do you work with LPC55sxx?


Have a great day,
Jun Zhang

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

3 Views
Contributor II

Hi Jun,

Thanks for your reply.

And one more thing to ask. In lpc55xx certificate chain scheme, who will provide the root certificate for software developer? Chip vendor such as nxp or the OEM? 

Thanks!

Wenchuan

0 Kudos

3 Views
NXP TechSupport
NXP TechSupport

Certification is not provided by nxp. it is generated by on chip application developer. OpenSSL is a good tool to generate certification.


Have a great day,
Jun Zhang

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

3 Views
Contributor II

Thanks a lot!

Wenchuan

0 Kudos

3 Views
NXP TechSupport
NXP TechSupport

You are welcome.


Have a great day,
Jun Zhang

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

0 Kudos