NXP Semiconductors
AN13500
EdgeLock A5000 Secure Authenticator for electronic anti-counterfeit protection using device-to-device
authentication
Figure 32. Plug & Trust Middleware OpenSSL engine default configuration
Note:
The A5000 does not support RSA, there it is recommended to remove the entry
RSA from the default algorithmus entry.
We can keep the default settings unmodified. To overrule the default OpenSSL
configuration, we can temporally assign the path to the
openssl11_sss_se050.cnf
file by setting the Linux environment variable
OPENSSL_CONF
. This step is performed
with the help of the shell’s
export
command.
export OPENSSL_CONF=~/se_mw/simw-top/demos/linux/common/
openssl11_sss_se050.cnf
Now we can use the same OpenSSL command to delegate the random numbers
generation to the A5000. The console output includes P&T MW default log messages.
openssl rand -hex 8
Figure 33. OpenSSL - Random number generated by A5000
Next in our example, the machine generates a 256-byte random number and stores it
into a text file. The random number is send to the control unit.
openssl rand -out machine_random.txt -hex 256
cat machine_random.txt
AN13500
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2022. All rights reserved.
Application note
Rev. 1.0 — 28 March 2022
27 / 45
