Questions on DH Key Support in HSE-B

[KaleRushikesh]

Hello NXP Community Team,

I have a couple of quick questions regarding DH key support in HSE-B:

1. Does HSE-B support Diffie-Hellman (DH) keys? If yes, then why does the call

   HseResponse = App_GetHseAttrCapabilities(MU0_INSTANCE_U8, &Hse_AttrCapabilities);  

   return a zero value for the HSE_CAP_IDX_CLASSIC_DH (25th bit) in Hse_AttrCapabilities

2. After adding the following key group to the NVM catalog:

   {(HSE_MU0_MASK), HSE_KEY_OWNER_CUST, HSE_KEY_TYPE_DH_PAIR, 2U, 1024U, {0U, 0U}},  

   the call to formatKeyCatalog returns HSE_SRV_RSP_NOT_ALLOWED. Could you clarify why this happens?

3. How can i generate the DH key pair, which later use for generate DH-shared-secret computation.

Thank you for your guidance.

Best regards, Rushikesh

[lukaszadrapa · Accepted solution]

Hi @KaleRushikesh 

This feature was available in earlier versions of HSE firmware but it was removed due to limited size of flash for HSE firmware. You can check release notes file of the firmware. I can see that it was removed from version 0.2.40.0 and higher:

If you need this feature, there’s an option to request premium customized version of HSE firmware. Please contact local sales person for details.

Regards,

Lukas