HSE_VerifyBootImage return HSE_SRV_RSP_VERIFY_FAILED

[liyongfeng]

I call the HSE_SignBootImage() function to obtain a 28-byte GMAC value. I select the first 16 bytes and program them to the addresses from 0x4000F0 to 0x4000FF. Then, when I execute HSE_VerifyBootImage((uint8_t*) 0x400000), it returns HSE_SRV_RSP_VERIFY_FAILED.What could be the possible reason? Is it due to the big-endian or little-endian issue?

[liyongfeng]

liyongfeng_0-1746000217029.png

[lukaszadrapa]

Hi @liyongfeng 

I will check this but I need more time.

And if my understanding is correct, these threads are already outdated because you was already able to run the verification:

https://community.nxp.com/t5/S32K/S32K344-IVT-AUTH/td-p/2088034

https://community.nxp.com/t5/S32K/HSE-SignBootImage-return-HSE-SRV-RSP-INVALID-PARAM/td-p/2089734

I will get back to you as soon as possible.

Regards,

Lukas

[lukaszadrapa · Accepted solution]

Hi @liyongfeng 

I'm sorry for delayed response.

It's necessary to program all 28 bytes (IV + GMAC) behind the IVT:

lukaszadrapa_0-1746439898445.png

I tested it on my side and the verification was successful if I programmed the IV+GMAC like this:

lukaszadrapa_1-1746439953228.png

Regards,

Lukas