[Security] CSEC_MASTER_ECU Key import

[Gideon]

Dear NXPs：

In the example of S32DS, in order to import ECU_MASTER_KEY, set the empty key value to 0xFF. csec_utils.c

/* AuthId is the MASTER_ECU key */ uint8_t g_emptyKey[16] = {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF};

uint8_t g_authIdKey[16] = {0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f};

csec_key_id_t g_authId = CSEC_MASTER_ECU;

So does the value of g_emptyKey have to be set to 0xFF in NXP?

[lukaszadrapa · Accepted solution]

Hi @Gideon 

yes, if a key is empty, 'all 1s' should be used. It's mentioned in the S32K1 reference manual:

and also in application note AN5401:

Regards,

Lukas