Google Git
Sign in
pigweed / third_party / github / project-chip / connectedhomeip / bdb77b019d2a4eb65144c33b895d0f6e4b029c7a / . / src / crypto / hsm / nxp
tree: 8f330a03255d2b3f2a42216d540edd092ecbaffb [path history] [tgz]
  1. CHIPCryptoPALHsm_SE05X_HKDF.cpp
  2. CHIPCryptoPALHsm_SE05X_HMAC.cpp
  3. CHIPCryptoPALHsm_SE05X_P256.cpp
  4. CHIPCryptoPALHsm_SE05X_PBKDF.cpp
  5. CHIPCryptoPALHsm_SE05X_Spake2p.cpp
  6. CHIPCryptoPALHsm_SE05X_utils.cpp
  7. CHIPCryptoPALHsm_SE05X_utils.h
  8. PersistentStorageOperationalKeystoreHSM.cpp
  9. PersistentStorageOperationalKeystoreHSM.h
  10. README.md
src/crypto/hsm/nxp/README.md

Using SE05X for crypto operations

Introduction

CHIPCryptoPALHsmSE05X*.cpp file provides the integration of secure element (SE05x) in crypto layer of CHIP stack. By enabling the required directives in CHIPCryptoPALHsm_config.h header file, required crypto operations can be performed using SE05x. By default, the secure element is enabled for PAKE (Verifier), HKDF, HMAC (SHA256).

Following are the list operations supported by secure element.

1. PAKE
2. ECC KEY - P256 (Disabled by default)
3. PBKDF (Disabled by default)
4. HKDF
5. HMAC (SHA256)

Build

  • Use the following gn build arguments to enable the secure element in crypto layer,
chip_with_se05x=1     ==> To enable Se05x
host = "host_k32w"    ==> To set host
chip_with_se05x_da=1  ==> To enable device attestation using se05x. Provision key at key id = '0xDADADADA'. Also enable `ENABLE_HSM_GENERATE_EC_KEY` in CHIPCryptoPALHsm_config.h file.

Known Limitations:

  • None