NXP Semiconductors
AN13500
EdgeLock A5000 Secure Authenticator for electronic anti-counterfeit protection using device-to-device
authentication
Figure 34. OpenSSL - A5000 random numbers are stored in a text file
The control unit uses the A5000 to generate the ECC signature using standard
OpenSSL commands. This is performed by providing a control unit reference key
(
control_unit_ref_key.pem
) instead of a private key. The signature is stored in the
sig_machine_random.sha256
in binary format.
openssl dgst -sha256 -sign control_unit_ref_key.pem -out
control_unit_signature.sha256 machine_random.txt
Figure 35. OpenSSL - The A5000 signs the random numbers with the private ECC
key stored inside the A5000
We can use the following Linux command to display the binary signature value.
xxd -c 16 -g 1 -u control_unit_signature.sha256
Figure 36. Control unit signature
The machine extracts the unique control unit public key from certificate using the
following OpenSSL command:
AN13500
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2022. All rights reserved.
Application note
Rev. 1.0 — 28 March 2022
28 / 45
