use of ARM TrustZone on nrf52840 for secure storage/trusted region

[pietrushnic]

Hi all, I have need to create BLE device with ability to securely store private keys and change those. According to presentation from ARM with assistance of CryptoCell and key inside CPU I should be able to create trusted region on flash, which I assume I can use in similar way as secure storage.

Unfortunately there is no information about that in Nordic InfoCenter CryptoCell API say nothing about storing generated keys (or I miss something). Also I can't see detailed specification of CryptoCell-310 (ARM website say mostly about 300 and 312), how 310 is different ?

Are there any additional hardware requirements for my application to implement secure storage for private keys ?

Any information about possible CryptoCell use cases appreciated.

[Roger Clark]

The link you posted is not publicly accessible

[endnode]

Interesting, it works well for me (PDF downloaded from public internet zone).

[Roger Clark]

Umm.

I get

403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.

Edit.

Tried it in FF and Chrome

Perhaps these pages are not accessible in my geo zone (Australia), or the new anti piracy blocking system enforced by the Australian Government prevents me viewing them

Edit.

Google finds

www.google.com.au/url

But I would need an ARM account to view that link

[pietrushnic]

@Roger sorry this was misclick. Not sure how to revert that ? I will try to replace link to ARM page with direct link to PDF.

[Roger Clark]

LOL

You (or I) can edit the answer but I don't think you can remove it