NXP Semiconductors
AN13500
EdgeLock A5000 Secure Authenticator for electronic anti-counterfeit protection using device-to-device
authentication
Figure 40. OpenSSL - A5000 random numbers are stored in a text file
The machine uses the A5000 to generate the ECC signature. This is performed by
providing a machine reference key (
machine_ref_key.pem
) instead of a private key.
The signature is stored in the
sig_control_unit_random.sha256
in binary format.
openssl dgst -sha256 -sign
machine_ref_key.pem
-out
mashine_signature.sha256 control_unit_random.txt
Figure 41. OpenSSL - The A5000 signs the random numbers with the private ECC
key stored inside the A5000
We can use the following Linux command to display the binary signature value.
xxd -c 16 -g 1 -u mashine_signature.sha256
Figure 42. Machine signature
The control unit extracts the unique machine public key from certificate using the
following OpenSSL command:
openssl x509 -in machine.pem -pubkey -noout > machine_pub.pem
AN13500
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2022. All rights reserved.
Application note
Rev. 1.0 — 28 March 2022
32 / 45
