Storing X509 Certificate

[SubuMuthu]

Hi, 

Platform: nRF54L15

SDK: V2.9.0

The application is Matter + BLE. 

We would like to use X509 certificates which will be used for authentication when the application is used in BLE. We would like to

1. Store the certificate either in KMU(preferred, if possible) or in the Trusted storage.
2. Extract the pubic key and the signature value for authentication. 

Is there a sample code or example for the above? I went the samples/crypto but could not find one.

Thanks.

Subu Muthu

[dejans]

Hi,

Regarding crypto algorithm, Matter uses crypto algorithm specified in the specification. ECDSA is used as a proof of ownership of DAC certificate. It is however possible that you use EdDSA for your own purpose next to ECDSA.

Matter has been stable for a while and there are further initiatives in that direction.

Whether or not concrete API can be used depends largely on your need. Mentioned API should probably not be considered as public API or helper API for out-of Matter scope modules - it is more used for internal Matter operations.

Best regards,
Dejan