HAB4 - CST descendant key compromised

[antonio_santagi]

Hello,

I am using HAB4 and CST.

I read that SRK key can be revoked by blowing appropriate fuse.

Suppose I signed an image with an IMG1 key, subordinate , for example, to SRK1 key.

Suppose that IMG1 key gets compromised.

Can I revoke in some way only the IMG1 key, without revoking SRK1 key ? I guess answer is no, but just to double check for official answer.

So an image signed by that IMG1 key will always be authenticated unless correspondent SRK1 key is revoked. Is this correct ? Or can I stop that to happen without revoking SRK1 ?

thank you

[Yuri · Accepted solution]

Hello,

  Yes, only SRK can be revoked; "an image signed by that IMG1 key will always be authenticated

unless correspondent SRK1 key is revoked".

Have a great day,

Yuri.

-------------------------------------------------------------------------------

Note:

- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored

Please open a new thread and refer to the closed one, if you have a related question at a later point in time.