Crypto Cell 310 dev on nRF9160

RE: Crypto Cell 310 dev on nRF9160

Sigurd — Tue, 05 Mar 2019 16:06:27 GMT

[quote userid="77755" url="~/f/nordic-q-a/44378/crypto-cell-310-dev-on-nrf9160/174318"]Is there any particular reason to justify that the CC310 mailbox system and the associated regsiters are not public ?[/quote]

It is not public because the CC310 registers list and CC310 source code used in the library is confidential IP(Intellectual property) owned by ARM® Limited. So Nordic is not allowed to make this public.

RE: Crypto Cell 310 dev on nRF9160

Nico_ID — Tue, 05 Mar 2019 14:41:49 GMT

Great, I'm eager to get the April update.

Is there any particular reason to justify that the CC310 mailbox system and the associated regsiters are not public ?

RE: Crypto Cell 310 dev on nRF9160

Sigurd — Tue, 05 Mar 2019 13:42:00 GMT

[quote userid="77755" url="~/f/nordic-q-a/44378/crypto-cell-310-dev-on-nrf9160/174256"]However, your initial release of nrf_cc310_bl seems to be dedicated to bootloader usage, with limited set of crypto features (compared to the bunch of them embedded in CC310).[/quote]

That is correct. nrf_cc310_bl is designed to be size-optimized and intended for use cases involving the bootloader and DFU.

[quote userid="77755" url="~/f/nordic-q-a/44378/crypto-cell-310-dev-on-nrf9160/174256"]How can I access the full set of algos ?[/quote]

We are still working on the nrf_cc310 library for the nRF9160. I believe it will be included in the next release of nRF Connect SDK (March/April timeframe).

[quote userid="77755" url="~/f/nordic-q-a/44378/crypto-cell-310-dev-on-nrf9160/174256"]Is there a lower level doc to communicate with CC310 ? the nRF doc only talks about ENABLE register.[/quote]

No. The cryptographic functions of CC310 are only accessible by using the mentioned library, not directly via a register interface.

RE: Crypto Cell 310 dev on nRF9160

Nico_ID — Tue, 05 Mar 2019 13:02:08 GMT

Thanks for the answer.

However, your initial release of nrf_cc310_bl seems to be dedicated to bootloader usage, with limited set of crypto features (compared to the bunch of them embedded in CC310).

How can I access the full set of algos ?

On this page (https://www.nordicsemi.com/DocLib/Content/Product_Spec/nRF9160/latest/cryptocell?196#cc_frontpage) there is a mention to a CryptoCell library. Is that the nrf_cc310_bl or another ?

Is there a lower level doc to communicate with CC310 ? the nRF doc only talks about ENABLE register.

RE: Crypto Cell 310 dev on nRF9160

Sigurd — Tue, 05 Mar 2019 12:53:10 GMT

Hi,

We have a initial release of nrf_cc310_bl for the nRF Connect SDK in nrfxlib, see this link. (Note that these libraries are delivered in an experimental state).

API documentation can be found here. The CC310 peripheral documenation can be found here.

RE: Crypto Cell 310 dev on nRF9160

Nico_ID — Mon, 04 Mar 2019 16:58:09 GMT

I found that nRF Connect SDK configuration menu (in SEGGER Embedded Studio) offers a SECURE_BOOT option that seems to pull CC310 libraries to perfom crypto checks on firmware.

In appearance, it looks nice, and suits to what i'm looking for. However, when I enable this option in a project nothing changes. The generated ELF file does not change, and no bootloader elf is generated as expected (http://www.nordicsemiconductors.no/nRF_Connect_SDK/doc/latest/nrf/ug_bootloader.html).

Any hint ?