| .. |
| Copyright 2019,2020 NXP |
| |
| |
| =========================================================== |
| Usage Examples |
| =========================================================== |
| |
| .. highlight:: shell |
| |
| SE05X: VCOM Interface |
| =========================================================== |
| |
| Provisioning ECC Pair and Certificate:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli se05x reset |
| ssscli set ecc pair 0x20181001 tstData\tls_client_key.pem |
| ssscli set cert 0x20181002 tstData\tls_client.cer |
| ssscli disconnect |
| |
| Generating ecc key and retrive public key:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli se05x reset |
| ssscli generate ecc 0x20181006 NIST_P256 |
| ssscli get ecc pair 0x20181006 data\tls_key.pem |
| ssscli disconnect |
| |
| Inject and retrieve certificate:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli set cert 0x20181004 tstData\tls_client.cer |
| ssscli get cert 0x20181004 data\extracted_certificate.cer |
| ssscli disconnect |
| |
| Erase key, Inject ecc Key and Sign certificate:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli erase 0x20181001 |
| ssscli set ecc pair 0x20181001 tstData\tls_client_key.pem |
| ssscli sign 0x20181001 tstData\tls_client.cer data\signed_data.pem |
| ssscli disconnect |
| |
| Inject and Retrieve AES key:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli se05x reset |
| ssscli set aes 0x40100000 tstData\aes.der |
| ssscli get aes 0x40100000 data\extracted_aes_key.cer |
| ssscli disconnect |
| |
| Inject ECC Public Key:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli set ecc pub 0x20181010 tstData\tls_client_key_pub.pem |
| ssscli disconnect |
| |
| Generate RSA Key and Get public key in DER format:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate rsa 0x20182001 2048 |
| ssscli get rsa pub 0x20182001 data\rsa_pub_2048.der --format DER |
| ssscli disconnect |
| |
| Generate ecc Koblitz 256 Key, Sign Binary data and verify:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate ecc 12E41001 Secp256k1 |
| ssscli sign 12E41001 tstData\binary_data.bin signed_data_ecc_secp256k1.pem |
| ssscli verify 12E41001 tstData\binary_data.bin signed_data_ecc_secp256k1.pem |
| ssscli disconnect |
| |
| Generate ecc Brainpool192 Key and Sign and verify certificate using SHA512 has algorithm:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate ecc 0x2E101501 Brainpool192 |
| ssscli sign 0x2E101501 tstData\tls_client.cer data\signed_data.pem --hashalgo=SHA512 |
| ssscli verify 0x2E101501 tstData\tls_client.cer data\signed_data.pem --hashalgo=SHA512 |
| ssscli disconnect |
| |
| Read Cert UID of 10 bytes long:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli se05x certuid |
| |
| Read UID of 18 bytes long:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli se05x uid |
| |
| Session open with auth type as Platform SCP, generate ecc Brainpool192 Key:: |
| |
| ssscli connect se05x vcom COM5 --auth_type PlatformSCP --scpkey "c:/_ddm/scpkey.txt" |
| ssscli se05x reset |
| ssscli generate ecc 2E10D532 Brainpool192 |
| ssscli disconnect |
| |
| Generate ecc Koblitz256 key and create reference key:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate ecc 7A10D838 Secp256k1 |
| ssscli refpem ecc pair 7A10D838 data\refkey_secp256k1.pem |
| ssscli disconnect |
| |
| Generate rsa 4096 key and create reference key in pkcs12 format:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate rsa 0x70102040 4096 |
| ssscli refpem rsa pair 0x70102040 rsa_4096_rekey.pfx --password nxp |
| ssscli disconnect |
| |
| Generate ecc Brainpool 256 key and create pkcs12 format reference key extracted to pem format:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate ecc 70102050 Brainpool256 |
| ssscli refpem ecc pair 70102050 ecc_bp256_rekey.pem --format PKCS12 --password nxp |
| ssscli disconnect |
| |
| Generate ecc ED25519 key and sign certificate:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate ecc 70102060 ED25519 |
| ssscli sign 70102060 tstData\tls_client.cer data\signed_data_using_ed25519.pem |
| ssscli disconnect |
| |
| Generate ecc MONTH DH 25519 key:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate ecc 70102080 ED25519 |
| ssscli sign 70102080 tstData\tls_client.cer data\signed_data_using_ed25519.pem |
| ssscli disconnect |
| |
| Perform Encrypt and Decrypt using RSA 2048:: |
| |
| ssscli connect se05x vcom COM5 |
| ssscli generate rsa 0x20182001 2048 |
| ssscli get rsa pub 0x20182001 rsa_pub_2048.pem |
| ssscli set rsa pub 0x20184120 rsa_pub_2048.pem |
| ssscli encrypt 0x20184120 "Welcome to NXP" rsa_2048_encrypted_data.pem |
| ssscli decrypt 0x20182001 rsa_2048_encrypted_data.pem decrypted_data.txt |
| ssscli disconnect |
| |
| |
| SE05X: PCSC interface |
| =========================================================== |
| |
| Provisioning ECC Pair and Certificate:: |
| |
| ssscli connect se05x pcsc NXP |
| ssscli se05x reset |
| ssscli set ecc pair 0x20181001 tstData\tls_client_key.pem |
| ssscli set cert 0x20181002 tstData\tls_client.cer |
| ssscli disconnect |
| |
| Inject ECC Public Key:: |
| |
| ssscli connect se05x pcsc NXP |
| ssscli set ecc pub 0x20181010 tstData\tls_client_key_pub.pem |
| ssscli disconnect |
| |
| |
| se05x: JRCPV2 interface |
| =========================================================== |
| |
| Provisioning ECC Pair and Certificate:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli se05x reset |
| ssscli set ecc pair 0x20181001 tstData\tls_client_key.pem |
| ssscli set cert 0x20181002 tstData\tls_client.cer |
| ssscli disconnect |
| |
| Generating ecc key and retrive public key:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli se05x reset |
| ssscli generate ecc 0x40100000 NIST_P256 |
| ssscli get ecc pair 0x40100000 data\tls_key.pem |
| ssscli disconnect |
| |
| Set and retrieve certificate:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli set cert 0x20181002 tstData\tls_client.cer |
| ssscli get cert 0x20181002 data\extracted_certificate.cer |
| ssscli disconnect |
| |
| Erase a key, Inject ecc Key and Sign certificate:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli erase 0x20181001 |
| ssscli set ecc pair 0x20181001 tstData\tls_client_key.pem |
| ssscli sign 0x20181001 tstData\tls_client.cer data\signed_data.pem |
| ssscli disconnect |
| |
| Inject and Retrieve AES key:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli se05x reset |
| ssscli set aes 0x40200000 tstData\aes.der |
| ssscli get aes 0x40200000 data\extracted_aes_key.cer |
| ssscli disconnect |
| |
| Inject ECC Public Key:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli set ecc pub 0x20181010 tstData\tls_client_key_pub.pem |
| ssscli disconnect |
| |
| |
| Generate RSA Key and Get public key in PEM format:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate rsa 0x20182001 2048 |
| ssscli get rsa pub 0x20182001 data\rsa_pub_2048.pem --format PEM |
| ssscli disconnect |
| |
| Generate ecc Koblitz 256 Key, Sign Binary data and verify:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate ecc 12E41001 Secp256k1 |
| ssscli sign 12E41001 tstData\binary_data.bin signed_data_ecc_secp256k1.pem |
| ssscli verify 12E41001 tstData\binary_data.bin signed_data_ecc_secp256k1.pem |
| ssscli disconnect |
| |
| Generate ecc Brainpool192 Key and Sign and verify certificate using SHA512 has algorithm:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate ecc 0x2E101501 Brainpool192 |
| ssscli sign 0x2E101501 tstData\tls_client.cer data\signed_data.pem --hashalgo=SHA512 |
| ssscli verify 0x2E101501 tstData\tls_client.cer data\signed_data.pem --hashalgo=SHA512 |
| ssscli disconnect |
| |
| Read Cert UID of 10 bytes long:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli se05x certuid |
| |
| Read UID of 18 bytes long:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli se05x uid |
| |
| Session open with auth type as Platform SCP, generate ecc Brainpool192 Key:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 --auth_type PlatformSCP --scpkey "c:/_ddm/scpkey.txt" |
| ssscli se05x reset |
| ssscli generate ecc 2E10D532 Brainpool192 |
| ssscli disconnect |
| |
| Generate ecc Koblitz256 key and create reference key:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate ecc 7A10D838 Secp256k1 |
| ssscli refpem ecc pair 7A10D838 data\refkey_secp256k1.pem |
| ssscli disconnect |
| |
| Generate rsa 4096 key and create reference key in pkcs12 format:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate rsa 0x70102040 4096 |
| ssscli refpem rsa pair 0x70102040 rsa_4096_rekey.pfx --password nxp |
| ssscli disconnect |
| |
| Generate ecc Brainpool 256 key and create pkcs12 format reference key extracted to pem format:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate ecc 70102050 Brainpool256 |
| ssscli refpem ecc pair 70102050 ecc_bp256_rekey.pem --format PKCS12 --password nxp |
| ssscli disconnect |
| |
| Generate ecc ED25519 key and sign certificate:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate ecc 70102060 ED25519 |
| ssscli sign 70102060 tstData\tls_client.cer data\signed_data_using_ed25519.pem |
| ssscli disconnect |
| |
| Generate ecc MONTH DH 25519 key:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate ecc 70102080 ED25519 |
| ssscli sign 70102080 tstData\tls_client.cer data\signed_data_using_ed25519.pem |
| ssscli disconnect |
| |
| Perform Encrypt and Decrypt using RSA 2048:: |
| |
| ssscli connect se05x jrcpv2 127.0.0.1:8050 |
| ssscli generate rsa 0x20182001 2048 |
| ssscli get rsa pub 0x20182001 rsa_pub_2048.pem |
| ssscli set rsa pub 0x20184120 rsa_pub_2048.pem |
| ssscli encrypt 0x20184120 "Welcome to NXP" rsa_2048_encrypted_data.pem |
| ssscli decrypt 0x20182001 rsa_2048_encrypted_data.pem decrypted_data.txt |
| ssscli disconnect |
| |
| |
| A71CH: VCOM Interface |
| =========================================================== |
| |
| Provisioning ECC Pair and Certificate:: |
| |
| ssscli connect a71ch vcom COM7 |
| ssscli a71ch reset |
| ssscli set ecc pair 0x20181003 tstData\tls_client_key.pem |
| ssscli set cert 0x20181004 tstData\tls_client.cer |
| ssscli disconnect |
| |
| Generating ecc key and retrive public key:: |
| |
| ssscli connect a71ch vcom COM7 |
| ssscli a71ch reset |
| ssscli generate ecc 0x20181003 NIST_P256 |
| ssscli get ecc pair 0x20181003 data\tls_key.pem |
| ssscli disconnect |
| |
| Set certificate and retrieve certificate:: |
| |
| ssscli connect a71ch vcom COM7 |
| ssscli set cert 0x20181004 tstData\tls_client.cer |
| ssscli get cert 0x20181004 data\extracted_certificate.cer |
| ssscli disconnect |
| |
| Erase a key, Inject ecc Key and Sign certificate:: |
| |
| ssscli connect a71ch vcom COM7 |
| ssscli erase 0x20181005 |
| ssscli set ecc pair 0x20181005 tstData\tls_client_key.pem |
| ssscli sign 0x20181005 tstData\tls_client.cer data\signed_data.pem |
| ssscli disconnect |
| |
| |
| |
| A71CH: SCI2C interface |
| =========================================================== |
| |
| Provisioning ECC Pair and Certificate:: |
| |
| ssscli connect a71ch sci2c none |
| ssscli a71ch reset |
| ssscli set ecc pair 0x20181005 tstData/tls_client_key.pem |
| ssscli set cert 0x20181002 tstData/tls_client.cer |
| ssscli disconnect |
| |
| Generating ecc key and retrive public key:: |
| |
| ssscli connect a71ch sci2c none |
| ssscli a71ch reset |
| ssscli generate ecc 0x40100000 NIST_P256 |
| ssscli get ecc pair 0x40100000 data/tls_key.pem |
| ssscli disconnect |
| |
| Set certificate and retrieve certificate:: |
| |
| ssscli connect a71ch sci2c none |
| ssscli set cert 0x20181002 tstData/tls_client.cer |
| ssscli get cert 0x20181002 data/extracted_certificate.cer |
| ssscli disconnect |
| |
| Erase a key, Inject ecc Key and Sign certificate:: |
| |
| ssscli connect a71ch sci2c none |
| ssscli erase 0x20181001 |
| ssscli set ecc pair 0x20181001 tstData/tls_client_key.pem |
| ssscli sign 0x20181001 tstData/tls_client.cer data/signed_data.pem |
| ssscli disconnect |
| |
| |
| |
| MBEDTLS |
| =========================================================== |
| |
| Provisioning ECC Pair and Certificate:: |
| |
| ssscli connect mbedtls none data |
| ssscli set ecc pair 0x20181005 tstData\tls_client_key.pem |
| ssscli set cert 0x20181002 tstData\tls_client.cer |
| ssscli disconnect |
| |
| Generating ecc key and retrive public key:: |
| |
| ssscli connect mbedtls none data |
| ssscli generate ecc 0x20181003 NIST_P256 |
| ssscli get ecc pair 0x20181003 data\tls_key.pem |
| ssscli disconnect |
| |
| Set certificate and retrieve certificate:: |
| |
| ssscli connect mbedtls none data |
| ssscli set cert 0x20181004 tstData\tls_client.cer |
| ssscli get cert 0x20181004 data\extracted_certificate.cer |
| ssscli disconnect |
| |
| Erase key, provisioning ecc Key and Sign certificate:: |
| |
| ssscli connect mbedtls none data |
| ssscli erase 0x20181005 |
| ssscli set ecc pair 0x20181005 tstData\tls_client_key.pem |
| ssscli sign 0x20181005 tstData\tls_client.cer data\signed_data.pem |
| ssscli disconnect |
