AN1412: Zigbee Security Manager

PublishTime：2023-10-28

●This document describes the Zigbee Security Manager group of components that have been used by Silicon Labs' Zigbee stack for its security operations since EmberZNet 7.2. The components add several new APIs for key access and cryptographic operations, introduced to provide support for the use of secure key storage (see AN1271: Secure Key Storage) on supported parts.
●This document is mainly focused on describing the components and APIs used to interact with security functionality since Zigbee EmberZNet SDK 7.2.
●KEY POINTS
■The Zigbee Security Manager components are now used by the Zigbee stack to manage access to security keys and operations performed with them.
■On parts with Secure Vault-High support, the underlying implementation of the APIs is provided by the PSA Crypto implementation in Secure Vault.
■The new APIs replace legacy Zigbee security API functionality and separate fetching of key data from key metadata.
●Introduction
■Versions of EmberZNet since 7.2 have offered the ability to use AN1271: Secure Key Storage on supported parts, with the PSA Crypto APIs in Secure Engine being used to implement this. As not all parts support key wrapping, the existing methods of key storage in plaintext NVM3 tokens continue to be maintained. Such builds do not call the PSA Crypto APIs for key storage. The Zigbee Security Manager components were therefore introduced to have a unified set of APIs for the stack to use that more closely aligned with the setup of the PSA Crypto APIs.
■This document describes some of the changes involved in using these new APIs to manage key storage and cryptographic operations.
■Previous APIs are callable in versions through 7.3 with their implementations now routing through Zigbee Security Manager APIs but are scheduled for removal in a future release

Brand of Product：	Silicon Labs
Part#：
Product Category：	Zigbee EmberZNet SDK More
Application：	More
Data Type：	Application note & Design Guide More
Safety & Environment Standards：	More
Operating Temperature：	Please see the document for details
Qualification Grade：	More
Qualification Approval：	More
Package：
Language：	English Chinese Chinese and English Japanese
Date of Creation：	2023/9/29
Version Number：	Rev. 0.1
Data Encoding：	AN1412
Data Size：	1.2 MB

Data section preview(2pages)

- The full preview is over. If you want to read the whole 11 page document,please Sign in/Register -

Download

+1 Like
Add to Favorites

Recommend

Technical Resources

More>

All reproduced articles on this site are for the purpose of conveying more information and clearly indicate the source. If media or individuals who do not want to be reproduced can contact us, which will be deleted.

Integrated Circuits