2.27. Release v02.11.00
¶
2.27.1. File/Folder relocation¶
boards folder has been moved from
- simw-top\ext\mcu-sdk
to
- simw-top\demos\ksdk\common
├───boards │ ├───evkmimxrt1060 │ │ ├───project_template │ │ ├───se_hostlib_examples │ │ │ ├───cloud_demo │ │ │ │ └───linker │ │ │ └───mainA71CH │ │ │ └───linker │ │ └───xip │ ├───frdmk64f │ │ ├───project_template │ │ └───se_hostlib_examples │ │ ├───cloud_demo │ │ │ └───linker │ │ ├───mainA71CH │ │ ├───se_hostlib_test │ │ └───vcomA71CH │ ├───frdmk82f │ │ ├───project_template │ │ └───se_hostlib_examples │ │ ├───mainA71CH │ │ ├───se_hostlib_test │ │ └───vcomA71CH │ ├───frdmkw41z │ │ ├───project_template │ │ └───se_hostlib_examples │ │ ├───mainA71CH │ │ └───se_hostlib_test │ ├───lpc54018iotmodule │ │ ├───project_template │ │ └───se_hostlib_examples │ │ ├───aws_jitr_demo_enet │ │ ├───aws_jitr_demo_wifi │ │ └───mainA71CH │ └───lpcxpresso55s │ ├───project_template │ └───se_hostlib_examples │ └───cloud_demo │ └───linker
freertos folder moved from
- simw-top\ext\freertos
to
- simw-top\demos\ksdk\common\freertos
──freertos │ FreeRTOSConfig.c
other boards folder has been moved from
- simw-top\ext\boards
to
- simw-top\demos\ksdk\common\freertos\boards
│ └───boards ├───evkmimxrt1060 │ app.h │ aws_bufferpool_config.h │ aws_mqtt_agent_config.h │ aws_mqtt_config.h │ aws_secure_sockets_config.h │ CMakeLists.txt │ FreeRTOSConfig.h │ FreeRTOSIPConfig.h │ fsl_phy.h │ lwipopts.h │ ├───frdmk64f │ app.h │ aws_bufferpool_config.h │ aws_mqtt_agent_config.h │ aws_mqtt_config.h │ aws_secure_sockets_config.h │ CMakeLists.txt │ FreeRTOSConfig.h │ FreeRTOSIPConfig.h │ fsl_phy.h │ lwipopts.h │ └───lpcxpresso55s app.h aws_bufferpool_config.h aws_mqtt_agent_config.h aws_mqtt_config.h aws_secure_sockets_config.h CMakeLists.txt FreeRTOSConfig.h FreeRTOSIPConfig.h fsl_phy.h lwipopts.h
2.27.2. APIs & enum/types Changes¶
Removed
SE05x_AuthCtx_UserID_t
. UseSE05x_AuthCtx_ID_t
insteadRemoved
SE_ConnType_t
. UseSSS_Conn_Type_t
insteadRemoved
SEConnType_t
. UseSSS_Conn_Type_t
insteadRemoved
AppletConfig_SM
fromSE05x_Applet_Feature_t
Renamed
se05x_TP_PlatformSCP03keys
tose05x_RotatePlatformSCP03Keys
2.27.3. Functional Changes¶
- Added CCID/PCSC Interface (Experimental):
Added
kType_SE_Conn_Type_PCSC
Added weak function
SysTick_Handler_APP_CB()
to allow unblocking of threads. This is needed to handle the IRQ based design of CCID Middleware.
- Added support for hmac-sha224 in mbedtls and openssl SSS MAC apis:
Fix a crash seen in
sss_mbedtls_mac_context_free
.Renamed and modified project
se05x_Get_UID
asse05x_Get_Info
to include platform information also.
2.27.4. New platform support¶
Added support for secure world and non secure world implementation of LPC55S.
2.27.5. Scripts and Build changes¶
Added AOSP build support for Android keymaster.
Added
Host=lpcxpresso55s_s
andHost=lpcxpresso55s_ns
to support secure world implementation of LPC55S.No longer supporting
-DApplet_SE05X_Ver=02_02_00
Creating
cmake_options.mak
similar tofsl_sss_ftr.h
so that customer build systems can be used/extended.
2.27.6. SSSCLI / PyCLI Changes¶
Switched to Python 3
Prvoisioning scripts refactored to be more consistant with internal variable names for keys and certificates. (No behaviour change)
Updated cryptography patch to support BrainpoolP256R1 curve
Refactored scripts to use different variable names.
For some versions of python cryptography module,
key_size
was not available. Handling this within python library now.Added PKCS#12 format reference key creation.
Enabled pcsc connection method
2.27.7. Documentation Changes¶
Documentation for Demos updated. Earlier, KSDK demos were mentioning Raspberry Pi steps as well. This is removed now.
Included documentation on how to get SE UID
Included documentation for Ease of Use with IBM Watson and GCP
Added default cmake options for imx and rpi build document.
i.MX / Yocto instructions updated to include Python3 and func-timeout Python package
2.27.8. Communication Layer Changes¶
Optimized T1oI2C transreceive time by 3-8 ms.
Poll waiting time has been reduced from 5ms to 1ms.
T=1 I2C support for GP 0.39 specification.
Warning
You need to add both
-DT1oI2C
and-DT1oI2C_UM1225_SE050
in your build system makefile to select T=1 over I2C Interface of SE050.Earlier only
-DT1oI2C
was needed.
2.27.9. Other Miscellaneous Changes¶
Support for DTLS example
Included certificate chain in middleware for trust provisioned keys
Included pre-built binary to get SE UID for FRDM-K64F, iMX-RT1060 and LPC55S
Included pre-built binary for VCOM for LPC55S
Added azure root certificate
Key generation added for a71ch openssl engine (openssl 1.1.1)
Compile time directives for SE050A/B/C in openssl engine
Added
EX_SSS_BOOT_OPEN_HOST_SESSION
to let application decide on opening a host sessionExtended legacy openssl engine test scripts with multiple ecc keys testing. Also replaced ssscli tool with a71ch config tool for testing
Added sampleConfig.json file for aws (linux) demo
Added pre-built binaries to configure applet flavour (A, B or C) on iMX6 platform
Added pre-built EXEs to configure applet flavour (A, B or C) from PC and VCOM Connection