Skip to content

Commit b27e1cd

Browse files
committed
1)Updated the certification slot for Matter DAC(For Trust M MTR)
1 parent e95cd5f commit b27e1cd

4 files changed

+10
-10
lines changed

docs/guides/infineon_trustm_provisioning.md

+5-5
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ can be used to perform provisioning by following the steps mentioned below.
3535

3636
- Run the script to generate Matter test DAC for lock-app using the public key
3737
extracted from the Infineon pre-provisioned Certificate and store it into
38-
0xe0e3
38+
0xE0E0
3939

4040
```
4141
$ cd scripts/matter_provisioning/
@@ -48,14 +48,14 @@ _By running this example matter_dac_provisioning.sh, the steps shown below are
4848
executed:_
4949

5050
_Step1: Extract the public key from the Infineon pre-provisioned
51-
Certificate(0xe0e0) using openssl command._
51+
Certificate(0xE0E0) using openssl command._
5252

5353
_Step2: Generate DAC test certificate using the extracted public key, Signed by
5454
[Matter test PAI](https://github.com/project-chip/connectedhomeip/blob/v1.1-branch/credentials/development/attestation/Matter-Development-PAI-FFF1-noPID-Cert.pem)_.
5555
Please note that production devices cannot re-use these test keys/certificates.
5656

5757
_Step3: Write DAC test certificate into OPTIGA™ Trust M certificate slot
58-
0xe0e3_
58+
0xE0E0_
5959

60-
_Step4: Write Matter test PAI into OPTIGA™ Trust M certificate slot 0xe0e8
61-
and test CD into OPTIGA™ Trust M Arbitrary OID 0xf1e0._
60+
_Step4: Write Matter test PAI into OPTIGA™ Trust M certificate slot 0xE0E8
61+
and test CD into OPTIGA™ Trust M Arbitrary OID 0xF1E0.

src/platform/Infineon/crypto/trustm/CHIPCryptoPALHsm_HKDF_trustm.cpp

+2-2
Original file line numberDiff line numberDiff line change
@@ -81,8 +81,8 @@ CHIP_ERROR HKDF_sha::HKDF_SHA256(const uint8_t * secret, const size_t secret_len
8181

8282
// Trust M init
8383
trustm_Open();
84-
// Write metada
85-
write_metadata(TRUSTM_HKDF_OID_KEY, metadata, sizeof(metadata));
84+
// Write metada(Done during provisioning)
85+
// write_metadata(TRUSTM_HKDF_OID_KEY, metadata, sizeof(metadata));
8686
// Write the secret key
8787
write_data(TRUSTM_HKDF_OID_KEY, secret, secret_length_u16);
8888

src/platform/Infineon/crypto/trustm/CHIPCryptoPALHsm_HMAC_trustm.cpp

+2-2
Original file line numberDiff line numberDiff line change
@@ -74,8 +74,8 @@ CHIP_ERROR HMAC_sha::HMAC_SHA256(const uint8_t * key, size_t key_length, const u
7474

7575
// Trust M init
7676
trustm_Open();
77-
// Write metada for secret OID
78-
write_metadata(TRUSTM_HMAC_OID_KEY, metadata_hmac, sizeof(metadata_hmac));
77+
// Write metada for secret OID(Done during Provisioning)
78+
//write_metadata(TRUSTM_HMAC_OID_KEY, metadata_hmac, sizeof(metadata_hmac));
7979
// Update the secret key
8080
write_data(TRUSTM_HMAC_OID_KEY, key, key_length_u16);
8181

src/platform/Infineon/crypto/trustm/DeviceAttestationCredsExampleTrustM.cpp

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@
2626

2727
/* Device attestation key ids for Trust M */
2828
#define DEV_ATTESTATION_KEY_ID 0xE0F0
29-
#define DEV_ATTESTATION_CERT_ID 0xE0E3
29+
#define DEV_ATTESTATION_CERT_ID 0xE0E0
3030
#define PAI_CERT_ID 0xE0E8
3131
#define CERT_DECLARATION_ID 0xF1E0
3232

0 commit comments

Comments
 (0)