TLS Offloading in Yocto BSP 40.0

[pramod22b]

Hi Community,

(Yocto BSP 40.0, NXP s32g399ardb3) S32G3 

I am currently working on TLS offloading i.e instead of TLS I want to use HSE Keys in my applications.

Is there any way to offload TLS and use HSE algorithms??

[alejandro_e · Accepted solution]

Hello @pramod22b,

We do offer support to run SSL/TSL operation in the HSE, please check section 10.3.2 Building OpenSSL 3.0.5 for aarch64 of the BSP40 user manual [page 79, Linux BSP 40.0 User Manual for S32G3 platforms] which is under setion  10 HSE Security Support:

Screenshot 2025-02-04 162517.png

if possible, please review section 10 completely, as it explains all the necessary prerequisites to use the HSE API in Linux.  

Let me know if this information solved your question.

[ashwini2024]

Hello,

We have generated AES and ECC keys using the Hardware Security Engine (HSE) and have stored them in the RAM slots of the HSE.

We are now looking to access these keys stored in the RAM slots and integrate them into our TLS application, which is developed in Python. Could you kindly provide the steps or share any relevant documentation on how to accomplish this?

Thank you in advance for your asssitance.