Support Request for HSE Firmware Installation, Secure Key Storage, Secure Boot, Secure Flash

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 

Support Request for HSE Firmware Installation, Secure Key Storage, Secure Boot, Secure Flash

112 次查看
Ranjith_kumar
Contributor II

Dear NXP Support Team,

I am new to the Hardware Security Engine (HSE) module and seek guidance on how to effectively use the HSE module on the NXP S32K344 controller. Specifically, I would like to understand:

  1. How to install the HSE firmware onto the HSE module.

  2. Methods to securely store cryptographic keys in the HSE module.

  3. Implementing secure boot mechanisms leveraging the HSE.

  4. Options for secure debugging with password protection, preferably via UDS protocol.

I would greatly appreciate it if you could provide any reference manuals, example code, or application notes that demonstrate the development and integration of HSE firmware and related security features on the S32K344 platform.

Best regards,
Ranjith kumar


0 项奖励
回复
1 回复

88 次查看
lukaszadrapa
NXP TechSupport
NXP TechSupport

Hi @Ranjith_kumar 

Let me re-use a description which I wrote for another customers in the past. See please below. Just always use the latest firmware and latest documentation. The versions mentioned in the text are not up to date. 

And regarding secure debug - this is supported only via JTAG/SWD, not via UDS. 

Regards,

Lukas

***

Installation:

 

First, we provide application note which explains how to install the firmware. Go to:

https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-gener...

And select Documentation -> Secure Files. Here search for document “HSE FW install for S32K3xx”.

 

It’s also described in HSE-B Firmware Reference Manual rev. 2.2 which can be found in Secure Files section too. See chapter “3 HSE Firmware Installation”.

 

Then we provide this set of examples:

https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

 

After installation, you can find these two examples:

c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Device_Configuration\S32K344_HSE_FW_INSTALL\

c:\NXP\S32K3_HSE_DemoExamples_1_0_0\S32K3_HSE_DemoExamples\Device_Configuration\S32K344_HSE_FW_UPDATE\

 

The INSTALL example shows how to install the firmware via IVT.

 

The HSE firmware can be downloaded from S32K3 Standard Software -> HSE Firmware:

https://www.nxp.com/webapp/swlicensing/sso/downloadSoftware.sp?catid=SW32K3-STDSW-D

 

lukaszadrapa_0-1759941629220.png

 

 

Examples:

 

HSE DEMOAPP:

Can be downloaded from the same place as above:

lukaszadrapa_1-1759941629223.png

 

It supports also S32K396.

 

There’s detailed description in the readme file, section “4. Setup”:

c:\NXP\HSE_DEMOAPP_S32K3XX_0_2_40_0\HSE_DEMOAPP_S32K3XX_0_2_40_0_ReadMe.pdf

 

It describes all the steps needed to make the demo work – including copying of HSE FW interface files etc.

Because the demo requires Lauterbach Trace32 debugger (it uses a custom menu in Trace32), the demo was ported to following set of examples which can be used with any debugger:

 

https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

 

HSE DemoExamples are written for S32K344, it must be ported to S32K396. The functionality is the same, it’s just necessary to create new project for S32K396, copy the source files etc.

 

 

RTD examples:

 

Autosar Crypto driver in RTD contains examples written directly for S32K396:

lukaszadrapa_2-1759941629225.png

 

 

There are versions for EB Tresos Configurator or for S32 Design Studio IDE.

And there’s one example for MCAL crypto layer and one example for lower non-autosar Ip layer.

 

 

Secure boot

 

We provide Secure Boot application note including demo projects. It can be downloaded from:

https://www.nxp.com/products/S32K3

Application note can be found here:

Documentation -> Secure Files -> Secure Boot Application note v0.1.1.0 (AN744511)

Associated demo project can be downloaded here:

Design Resources -> Software -> Secure Files -> SecureBootAppNoteDemo (SW745310)

 

Next examples can be found in HSE DemoExamples already mentioned above:

https://www.nxp.com/webapp/Download?colCode=S32K3_HSE_DemoExamples

 

 

Documentation and trainings

 

HSE-B Firmware Reference Manual v2.3:

Can be downloaded from https://www.nxp.com/products/S32K3

Section Documentation -> Secure Files

This section also contains some HSE trainings.

 

HSE Service API Reference Manual:

Can be found on path like this after installation of HSE Firmware package:

c:\NXP\HSE_FW_S32K396_0_2_40_0\docs\S32K396_HSE_Service_API_Reference_Manual.pdf

 

Performance

 

See following sections in the datasheet:

6.1.3 Boot time, HSE firmware installed

6.1.4 HSE firmware memory verification time examples

https://www.nxp.com/docs/en/data-sheet/S32K3xx.pdf

0 项奖励
回复