CST tool generate bin.csf file size

[Casper]

Hi 

I'm using the CST tool to encrypt the image and trying to use the HAB API to decrypt that

However, I found the CST tool needs to reference the CSF file.

The CSF file describes the SRK information and certificate.

but when I run the CST tool to generate csf.bin. The size is around 7K always.

Is there any idea to reduce the bin.csf file size?

Thank you.

[Casper]

Hi @kerryzhou ,

Thanks for the reply.

It's good news for me that the csf file could be reduced to 4K.

I'm using i.MX RT1050

Thank you.

[kerryzhou]

Hi @Casper ,

   You are welcome!

   I also attach my generated file.

    If you still have question about it, just kindly let me know.

    If your question is solved, please help to mark the correct answer, just to close this case.

   Any new issues, welcome to create the new case.

Best Regards,

Kerry

[Casper]

Hi @kerryzhou ,

Thanks for the csf.bin provided.

May I know how you generate the csf.bin?

Thank you.

As far as I know, the csf data should include the SRK and other information below 

[kerryzhou · Accepted solution]

Hi @Casper ,

  Yes, of course.

   Please refer to my doc:

https://community.nxp.com/t5/i-MX-RT-Knowledge-Base/RT1050-HAB-Encrypted-Image-Generation-and-Analys...

  It include how to generate it.

Best Regards,

Kerry

[Casper]

I found the root cause was the SRK file.

The SRK bin size will affect the generated csf.bin size. 

[Casper]

Hi @kerryzhou,

Thanks for the details information provided.

I will follow the document. once the CSF.bin is successfully generated and the size around 4K will be closed.

Thank you.

[kerryzhou]

Hi @Casper ,

  You are welcome!

  If you meet any issues, also kindly let me know.

Best Regards,

Kerry

[kerryzhou]

Hi @Casper ,

  Please tell me which RT chip you are using now?

  I have tested the RT1050 HAB function previously, the generated csf.bin is just 4KB.

  So, please let me know your used RT chip at first, thanks.

Best Regards,

Kerry