2401976_en-US

[#1]

Question About SHA-512 of an ECC Public Key Stored in the NVM Key Catalog

Dear NXP Expert,

We have a question regarding the HSE key management functionality.

We are using the S32K312 with HSE-B, and we store an ECC public key in the NVM Key Catalog.

In our application, we need to obtain the SHA-512 hash of the ECC public key stored in the NVM Key Catalog.

After the key is stored, we would like to verify that it has been stored correctly by comparing its SHA-512 hash.

For example:

• Let K be the ECC public key stored in the NVM Key Catalog.
• We would like to obtain the value SHA-512(K).

Does HSE provide any API or mechanism to obtain the SHA-512 hash of a key stored in the NVM Key Catalog?

If not, is there any recommended way to calculate or verify SHA-512(K) for a key that is stored in the catalog?

Thank you for your support.

Re: Question About SHA-512 of an ECC Public Key Stored in the NVM Key Catalog

I got it. Thank you for your support

Re: Question About SHA-512 of an ECC Public Key Stored in the NVM Key Catalog

Hi @NghiaLX308 

There is no API that allows the user to perform SHA-512 directly on key material.

As a workaround, you can export the ECC public key  (using service HSE_SRV_ID_EXPORT_KEY) and then perform the SHA-512 operation (using service HSE_SRV_ID_HASH). Since an ECC public key is not secret, it can be exported in plaintext. There is no need to export it in an encrypted or authenticated format.

Regards,

Lukas