2.27. Release v02.11.00

2.27.1. File/Folder relocation

boards folder has been moved from

simw-top\ext\mcu-sdk

to

simw-top\demos\ksdk\common
├───boards
│   ├───evkmimxrt1060
│   │   ├───project_template
│   │   ├───se_hostlib_examples
│   │   │   ├───cloud_demo
│   │   │   │   └───linker
│   │   │   └───mainA71CH
│   │   │       └───linker
│   │   └───xip
│   ├───frdmk64f
│   │   ├───project_template
│   │   └───se_hostlib_examples
│   │       ├───cloud_demo
│   │       │   └───linker
│   │       ├───mainA71CH
│   │       ├───se_hostlib_test
│   │       └───vcomA71CH
│   ├───frdmk82f
│   │   ├───project_template
│   │   └───se_hostlib_examples
│   │       ├───mainA71CH
│   │       ├───se_hostlib_test
│   │       └───vcomA71CH
│   ├───frdmkw41z
│   │   ├───project_template
│   │   └───se_hostlib_examples
│   │       ├───mainA71CH
│   │       └───se_hostlib_test
│   ├───lpc54018iotmodule
│   │   ├───project_template
│   │   └───se_hostlib_examples
│   │       ├───aws_jitr_demo_enet
│   │       ├───aws_jitr_demo_wifi
│   │       └───mainA71CH
│   └───lpcxpresso55s
│       ├───project_template
│       └───se_hostlib_examples
│           └───cloud_demo
│               └───linker

freertos folder moved from

simw-top\ext\freertos

to

simw-top\demos\ksdk\common\freertos
──freertos
  │   FreeRTOSConfig.c

other boards folder has been moved from

simw-top\ext\boards

to

simw-top\demos\ksdk\common\freertos\boards
│
└───boards
    ├───evkmimxrt1060
    │       app.h
    │       aws_bufferpool_config.h
    │       aws_mqtt_agent_config.h
    │       aws_mqtt_config.h
    │       aws_secure_sockets_config.h
    │       CMakeLists.txt
    │       FreeRTOSConfig.h
    │       FreeRTOSIPConfig.h
    │       fsl_phy.h
    │       lwipopts.h
    │
    ├───frdmk64f
    │       app.h
    │       aws_bufferpool_config.h
    │       aws_mqtt_agent_config.h
    │       aws_mqtt_config.h
    │       aws_secure_sockets_config.h
    │       CMakeLists.txt
    │       FreeRTOSConfig.h
    │       FreeRTOSIPConfig.h
    │       fsl_phy.h
    │       lwipopts.h
    │
    └───lpcxpresso55s
            app.h
            aws_bufferpool_config.h
            aws_mqtt_agent_config.h
            aws_mqtt_config.h
            aws_secure_sockets_config.h
            CMakeLists.txt
            FreeRTOSConfig.h
            FreeRTOSIPConfig.h
            fsl_phy.h
            lwipopts.h

2.27.2. APIs & enum/types Changes

  • Removed SE05x_AuthCtx_UserID_t. Use SE05x_AuthCtx_ID_t instead

  • Removed SE_ConnType_t. Use SSS_Conn_Type_t instead

  • Removed SEConnType_t. Use SSS_Conn_Type_t instead

  • Removed AppletConfig_SM from SE05x_Applet_Feature_t

  • Renamed se05x_TP_PlatformSCP03keys to se05x_RotatePlatformSCP03Keys

2.27.3. Functional Changes

  • Added CCID/PCSC Interface (Experimental):
    • Added kType_SE_Conn_Type_PCSC

    • Added weak function SysTick_Handler_APP_CB() to allow unblocking of threads. This is needed to handle the IRQ based design of CCID Middleware.

  • Added support for hmac-sha224 in mbedtls and openssl SSS MAC apis:
  • Fix a crash seen in sss_mbedtls_mac_context_free.

  • Renamed and modified project se05x_Get_UID as se05x_Get_Info to include platform information also.

2.27.4. New platform support

  • Added support for secure world and non secure world implementation of LPC55S.

2.27.5. Scripts and Build changes

  • Added AOSP build support for Android keymaster.

  • Added Host=lpcxpresso55s_s and Host=lpcxpresso55s_ns to support secure world implementation of LPC55S.

  • No longer supporting -DApplet_SE05X_Ver=02_02_00

  • Creating cmake_options.mak similar to fsl_sss_ftr.h so that customer build systems can be used/extended.

2.27.6. SSSCLI / PyCLI Changes

  • Switched to Python 3

  • Prvoisioning scripts refactored to be more consistant with internal variable names for keys and certificates. (No behaviour change)

  • Updated cryptography patch to support BrainpoolP256R1 curve

  • Refactored scripts to use different variable names.

  • For some versions of python cryptography module, key_size was not available. Handling this within python library now.

  • Added PKCS#12 format reference key creation.

  • Enabled pcsc connection method

2.27.7. Documentation Changes

  • Documentation for Demos updated. Earlier, KSDK demos were mentioning Raspberry Pi steps as well. This is removed now.

  • Included documentation on how to get SE UID

  • Included documentation for Ease of Use with IBM Watson and GCP

  • Added default cmake options for imx and rpi build document.

  • i.MX / Yocto instructions updated to include Python3 and func-timeout Python package

2.27.8. Communication Layer Changes

  • Optimized T1oI2C transreceive time by 3-8 ms.

  • Poll waiting time has been reduced from 5ms to 1ms.

  • T=1 I2C support for GP 0.39 specification.

    Warning

    You need to add both -DT1oI2C and -DT1oI2C_UM1225_SE050 in your build system makefile to select T=1 over I2C Interface of SE050.

    Earlier only -DT1oI2C was needed.

2.27.9. Other Miscellaneous Changes

  • Support for DTLS example

  • Included certificate chain in middleware for trust provisioned keys

  • Included pre-built binary to get SE UID for FRDM-K64F, iMX-RT1060 and LPC55S

  • Included pre-built binary for VCOM for LPC55S

  • Added azure root certificate

  • Key generation added for a71ch openssl engine (openssl 1.1.1)

  • Compile time directives for SE050A/B/C in openssl engine

  • Added EX_SSS_BOOT_OPEN_HOST_SESSION to let application decide on opening a host session

  • Extended legacy openssl engine test scripts with multiple ecc keys testing. Also replaced ssscli tool with a71ch config tool for testing

  • Added sampleConfig.json file for aws (linux) demo

  • Added pre-built binaries to configure applet flavour (A, B or C) on iMX6 platform

  • Added pre-built EXEs to configure applet flavour (A, B or C) from PC and VCOM Connection