nRF5340 - private key vault

RE: nRF5340 - private key vault

Simon — Fri, 15 Jan 2021 13:07:37 GMT

I'm happy to help!

Could you open a new case about this, since it's not related to the initial question? Then we can keep DevZone more organized, and easier for future developers to navigate.

Best regards,

Simon

RE: nRF5340 - private key vault

Gabriele — Fri, 15 Jan 2021 12:42:59 GMT

Thank you Simon for the optimal answer.

I have another question.

I know that the QSPI peripheral allows to augment memory by interfacing an external SPI Flash memory.
In addition to the internal memory, does DFU by FOTA support the update of the external memory as well ?

Gabriele

RE: nRF5340 - private key vault

Simon — Fri, 15 Jan 2021 07:56:14 GMT

Regarding key generation on chip, I think this case and this answer may be helpful.

Best regards,

Simon

RE: nRF5340 - private key vault

Simon — Wed, 13 Jan 2021 13:34:57 GMT

Regarding key storage, the KMU and UICR is the way to go for secure key management on the nRF5340. A colleague made a sample demonstrating how to use the KMU peripheral: https://github.com/einarthorsrud/kmu_sample. It was made for nRF9160, but I think it should work for the nRF5340 as well. If you want to learn more about the KMU, just browse DevZone, where you'll find several cases about it.

Regarding generating the key, I need to read up and do some more investigation before coming up with a qualified answer.

Best regards,

Simon