ECC keys for Secure Boot

[nb1]

Hi,

I'm trying to determine whether or not ECC keys are supported in ISBC, as Super Root Keys (SRKs).

The Trust Arch User Guide vaguely mentions "RSA or ECC private keys" for signing, but any other descriptions (including the LSDK User Guide), pictures or examples I've seen very specifically and exclusively refer to RSA keys up to 4K.

I'd appreciate if you could let me know whether ECC keys are supported, and if so, the supported curves please. If you could point me to some documentation that would be great as well.

Thank you!

[bpe · Accepted solution]

ISBC supports only RSA. CST has no valid input file options for ECC in ISBC
headers. Only in the ESBC you have an option to use the ARM CoT for selecting
x509 format for ECC key or RSA key.

Best Regards,
Platon

[nb1]

Thank you!