How to construct SE050 Policies

[Imran406]

I am writing a driver for NXP SE050 in RUST and I am trying to generate nist-p-256 key pairs. I need to set policies to generate keys, I tried but I am getting invalid policy error code from secure element so how to set those policies? I have read the document, I don't understand, please explain how to create those policies?

What is objectId and how do I create?

[Kan_Li]

Hello @Imran406 ,

You may refer to section "3.7 Policies" in https://www.nxp.com.cn/docs/en/application-note/AN12413.pdf for details regarding the policy, and if you download the MW from https://www.nxp.com/webapp/Download?colCode=SE05x-PLUG-TRUST-MW&appType=license , you may refer to the demo of ex_policy as well as the readme doc in "simw-top/doc/demos/se05x/se05x_policy/Readme.html" for more details .

BTW, What is objectId you are referring to?

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[Imran406]

Hello @Kan_Li 

What is objectId you are referring to?

- I am referring to object identifier.

I have read the document but still I don't understand how to construct policies, could you please help me?

Best regards,

Imran

[Kan_Li]

Hi @Imran406 ,

I am sorry, but I am not sure if you are referring to the Authentication object ID which is just related with the policy,

Kan_Li_0-1675140991687.png

but if that is your case, the above Authentication object ID is just the ID value for the authentication objects which have the access rights specified in the policy with which the secure objects are attached, and when this ID is setup with a none zero value, then only when you open a session with the authentication object with that ID value, you may have the access rights specified in the policy, otherwise you may have them in a session-less access.

The construction of a policy has already been implemented in the MW, you may refer to sss_se05x_create_object_policy_buffer() in "simw-top\sss\src\se05x\fsl_sss_se05x_policy.c" for details.

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------