Asymmetric Crypto (RSA/ECC) Support for Secure Flashing on S32K144

[Kishore_14]

Hi,

Hardware: S32K144EVB-Q100
Software: S32 Design Studio, OpenBLT Bootloader, an5401-csec

We are planning to implement a secure flashing on the S32K144. For asymmetric cryptography (RSA and ECC) used in firmware signature verification, we would like to know:

1. Is asymmetric cryptography (RSA/ECC) supported only via software implementation on the S32K144, or is there any hardware acceleration available for these algorithms?

2. If the S32K144 MCU does not have hardware acceleration for RSA or ECC, and must perform signature verification entirely in software (using the CPU), what is the expected time required to verify a digital signature using:

   • RSA with a 2048-bit key
   • ECC with the secp256r1 curve
3. Are there any reference documents, or recommended libraries for these operations on this MCU?

We need to know how long it takes to verify RSA and ECC signatures in software.

Thanks.

[lukaszadrapa]

Hi @Kishore_14 

CSEc on S32K1 supports only symmetric operations. Asymmetric operations are not supported by hardware. If needed, it must be emulated by software. You can use something like WolfSSL or similar.

Because we do not provide such SW libraries, I can’t tell what will be the execution time. We do not have such benchmark.

I would consider to use S32K3 devices with HSE which supports also asymmetric operations.

Regards,

Lukas