Device root key / KDR

[Jonathan Swoboda]

The docs say: 

      Once configured, it is possible to perform cryptographic operations using the the CRYPTOCELL subsystem where KDR is selected as key input without having access to the key value itself

However I can not find anyway to do this in the cryptocell api. I tried to set HOST_CRYPTOKEY_SEL but that didnt help. 

The only reference to KDR is in SaSi_UtilKeyDerivation but I dont need to derive a key I need to use it.

The SaSi_AesSetKey function does provide a key type  but also says "Currently only SASI_AES_USER_KEY is supported".

So my question is how can we use KDR for AES in the crypto cell? The docs said we can but I cant find a way to do it in SW.

Thanks,

Jon

[Einar Thorsrud]

Hi Jon,

There is no SW support for using the device root key (KDR) directly, so it is not possible at the moment.

Einar