Attestation
Secure Element Manager

Description

System and configuration attestation.

API for retrieveing attestation tokens from the SE.

Functions

sl_status_t sl_se_attestation_get_psa_iat_token ( sl_se_command_context_t *cmd_ctx, const uint8_t *auth_challenge, size_t challenge_size, uint8_t *token_buf, size_t token_buf_size, size_t *token_size)
Get the PSA initial attest token from the SE.
sl_status_t sl_se_attestation_get_psa_iat_token_size ( sl_se_command_context_t *cmd_ctx, size_t challenge_size, size_t *token_size)
Get the size of a PSA initial attest token with the given nonce.
sl_status_t sl_se_attestation_get_config_token ( sl_se_command_context_t *cmd_ctx, const uint8_t *auth_challenge, size_t challenge_size, uint8_t *token_buf, size_t token_buf_size, size_t *token_size)
Get an attested (signed) security configuration token from the SE.
sl_status_t sl_se_attestation_get_config_token_size ( sl_se_command_context_t *cmd_ctx, size_t challenge_size, size_t *token_size)
Get the size of a security configuration token.

Macros

#define SL_SE_ATTESTATION_CHALLENGE_SIZE_32 (32U)
32 byte challenge size
#define SL_SE_ATTESTATION_CHALLENGE_SIZE_48 (48U)
48 byte challenge size
#define SL_SE_ATTESTATION_CHALLENGE_SIZE_64 (64U)
64 byte challenge size

Function Documentation

◆ sl_se_attestation_get_psa_iat_token()

sl_status_t sl_se_attestation_get_psa_iat_token ( sl_se_command_context_t * cmd_ctx,
const uint8_t * auth_challenge,
size_t challenge_size,
uint8_t * token_buf,
size_t token_buf_size,
size_t * token_size
)

Get the PSA initial attest token from the SE.

Parameters
[in] cmd_ctx Pointer to an SE command context object.
[in] auth_challenge Buffer with a challenge object selected by the caller.
[in] challenge_size Size of the challenge object in bytes. Must be either 32, 48 or 64.
[out] token_buf Buffer where the output token will be stored.
[in] token_buf_size Size of token_buf in bytes.
[out] token_size Number of bytes actually used in token_buf.
Warning
Once a nonce/challenge has been used, the same challenge should not be used ever again, to prevent replay attacks.
The output will be length-extended to the next word-multiple.
Returns
Status code, sl_status.h.

◆ sl_se_attestation_get_psa_iat_token_size()

sl_status_t sl_se_attestation_get_psa_iat_token_size ( sl_se_command_context_t * cmd_ctx,
size_t challenge_size,
size_t * token_size
)

Get the size of a PSA initial attest token with the given nonce.

Parameters
[in] cmd_ctx Pointer to an SE command context object.
[in] challenge_size Pointer to sl_se_key_descriptor_t structure.
[out] token_size Buffer holding the input data.
Returns
Status code, sl_status.h.

◆ sl_se_attestation_get_config_token()

sl_status_t sl_se_attestation_get_config_token ( sl_se_command_context_t * cmd_ctx,
const uint8_t * auth_challenge,
size_t challenge_size,
uint8_t * token_buf,
size_t token_buf_size,
size_t * token_size
)

Get an attested (signed) security configuration token from the SE.

Parameters
[in] cmd_ctx Pointer to an SE command context object.
[in] auth_challenge Buffer with a challenge object selected by the caller.
[in] challenge_size Size of the challenge object in bytes. Must be 32.
[out] token_buf Buffer where the output token will be stored.
[in] token_buf_size Size of token_buf in bytes.
[out] token_size Number of bytes actually used in token_buf.
Warning
Once a nonce/challenge has been used, the same challenge should not be used ever again, to prevent replay attacks.
The output will be length-extended to the next word-multiple.
Returns
Status code, sl_status.h.

◆ sl_se_attestation_get_config_token_size()

sl_status_t sl_se_attestation_get_config_token_size ( sl_se_command_context_t * cmd_ctx,
size_t challenge_size,
size_t * token_size
)

Get the size of a security configuration token.

Parameters
[in] cmd_ctx Pointer to an SE command context object.
[in] challenge_size Size of the challenge object in bytes. Must be either 32, 48 or 64.
[out] token_size Number of bytes actually used in token_buf.
Returns
Status code, sl_status.h.

Macro Definition Documentation

◆ SL_SE_ATTESTATION_CHALLENGE_SIZE_32

#define SL_SE_ATTESTATION_CHALLENGE_SIZE_32   (32U)

32 byte challenge size

◆ SL_SE_ATTESTATION_CHALLENGE_SIZE_48

#define SL_SE_ATTESTATION_CHALLENGE_SIZE_48   (48U)

48 byte challenge size

◆ SL_SE_ATTESTATION_CHALLENGE_SIZE_64

#define SL_SE_ATTESTATION_CHALLENGE_SIZE_64   (64U)

64 byte challenge size