Secure Provisioning SDK (SPSDK)

Secure Provisioning SDK (SPSDK) is an open-source development kit with its source code released on Github and PyPI. It contains a set of API modules for custom production tool development which requires more advanced secure provisioning flow. SPSDK enables communication with NXP’s microcontrollers for security features configuration, debug authentication, generation of Secure Binary (SB) images, trust provisioning and secure programming, etc.

Where to start?

Visit SPSDK landing page for the latest document and software on Github and PyPI.
Latest news? View “Announcement” label below
Get help or report issues? Visit Github. We centralize code release and support on Github.

Discussions

SPSDK v2.3 is now available for download This release brings new features for i.MX 93 and i.MX 95: Support for signing and encryption of existing AHAB (nxpimage ahab sign) Support for new AHAB container with PQC format version 2 Command for creating the PKI tree (nxpcrypto pki-tree) Support for i.MX95 DAT A0/A1/B0 revisions SPSDK integrates UUU with and brings python wrapper for libuuu https://pypi.org/project/libuuu/ New tool nxpuuu for programming of devices from SPSDK Support for nxpele over fastboot The latest changes are shown in the release notes

We have upgraded SPSDK to 2.0.1 which includes a large scale of changes: elftosb will be replaced by nxpimage nxpcertgen and nxpkeygen will be replaced by nxpcrypto select appropriate family will be done using: -f/–family parameter move towards options for all parameters with an exception to BLHost removal of crypto backends extend dedicated spsdk.crypto module - serve as the de-facto backend of SPSDK module level imports via init files

We plan to upgrade SPSDK to 2.0 in the next release which includes a large scale of changes. Customers are suggested to prepare for the changes before the 2.0 release (end of Sept 2023). Major changes in 2.0 are: elftosb will be replaced by nxpimage nxpcertgen and nxpkeygen will be replaced by nxpcrypto select appropriate family will be done using: -f/–family parameter move towards options for all parameters with an exception to BLHost removal of crypto backends extend dedicated spsdk.crypto module - serve as the de-facto backend of SPSDK module level imports via init files

Secure Provisioning SDK (SPSDK)

Secure Provisioning SDK (SPSDK)

Discussions

SPSDK v2.3 release

SPSDK v2.2.1 release

SPSDK 2.0.1 Release

Changes in Secure Provisioning SDK 2.0