2411758_en-US

Yes

Test HAB on IMXRT1024 without burning fuses

I have taken unsigned led blinky code and implemented HAB audit API (report status and report event). EVK board is open and fuses not burnt
Unsigned image(CSF=0) - HAB fail with 4 events
Signed image - HAB pass 0 events

So i assumed that even board is open HAB authentication runs and hence i can see events.

But now i taken project firmware with same IVT (CSF=0) and i implemented same HAB audit but this time
Unsigned image - HAB pass with 0 events

Led blinky logs (unsigned):
RVT header at 0x 2002c0: tag=0xdd len=0x 038 par=0x43
HAB: RVT version = 0x 40305
HAB: report_status() = 0x33(HAB_FAILURE)
HAB: config = 0xf0(HAB_CFG_OPEN)
HAB: state = 0x66(HAB_STATE_NONSECURE)
HAB: event[0], 8 bytes HAB: hdr: tag=0xdb len=0x 0 8 par=0x43 HAB: status=0x33(HAB_FAILURE) reason=0x22(HAB_INV_ADDRESS) context=0x a(HAB_CTX_AUTHENTICATE) engine=0x 0(HAB_ENG_ANY) HAB: raw: db 0 8 43 33 22 a 0

HAB: event[1], 20 bytes HAB: hdr: tag=0xdb len=0x 014 par=0x43
HAB: status=0x33(HAB_FAILURE) reason=0x c(HAB_INV_ASSERTION) context=0xa0(HAB_CTX_ASSERT) engine=0x 0(HAB_ENG_ANY) HAB: raw: db 0 14 43 33 c a0 0 0 0 0 0 60 0 10 0 0 0 0 20

HAB: event[2], 20 bytes HAB: hdr: tag=0xdb len=0x 014 par=0x43 HAB: status=0x33(HAB_FAILURE) reason=0x c(HAB_INV_ASSERTION) context=0xa0(HAB_CTX_ASSERT) engine=0x 0(HAB_ENG_ANY) HAB: raw: db 0 14 43 33 c a0 0 0 0 0 0 60 0 10 20 0 0 0 1

HAB: event[3], 20 bytes HAB: hdr: tag=0xdb len=0x 014 par=0x43 HAB: status=0x33(HAB_FAILURE) reason=0x c(HAB_INV_ASSERTION) context=0xa0(HAB_CTX_ASSERT) engine=0x 0(HAB_ENG_ANY) HAB: raw: db 0 14 43 33 c a0 0 0 0 0 0 60 0 20 0 0 0 0 4 HAB: VERDICT = 4 EVENT(S) LOGGED -- see decoded fields above but

my project firmware(unsigned)
HAB: RVT header at 0x002002c0 HAB: tag=0xdd len=0x0038 par=0x43
HAB: RVT found and valid
HAB: RVT version = 0x00040305
HAB: report_status() = 0xf0
HAB: config = 0xf0
HAB: state = 0x66 HAB: querying audit events...
HAB: report_event(idx=0) returned 0x33 (no events or query
HAB: VERDICT = PASS (no audit events logged)

Why there is a difference

Re: Test HAB on IMXRT1024 without burning fuses

Hi @Abhay2080 ,

Thanks for the reaching out! May I have the sdk version that has the led blinky code and the SPT version used for building the image?

Thank for your patience!

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------