User Guide - nxpkeygen

This user’s guide describes how to use nxpkeygen application.

Command line interface

nxpkeygen

NXP Key Generator Tool.

!!! The NXPKEYGEN tool is deprecated, use new NXPCRYPTO tool from SPSDK for new projects !!!

PATH - output file path, where the key pairs (private and public key) will be stored.

Each key will be stored in separate file (.pub and .pem).

nxpkeygen [OPTIONS] PATH

Options

-v, --verbose

Print more detailed information

-vv, --debug

Display more debugging information.

--version

Show the version and exit.

--help

Show this message and exit.

-k, --key-type <KEY-TYPE>

Set of the supported key types. Default is RSA2048.

Note: NXP DAT protocol is using encryption keys by this table:

NXP Protocol Version Encryption Type

1.0 RSA 2048 1.1 RSA 4096 2.0 SECP256R1 2.1 SECP384R1 2.2 SECP521R1

All possible options: rsa2048, rsa3072, rsa4096, prime192v1, prime256v1, secp192r1, secp224r1, secp256r1, secp384r1, secp521r1, secp256k1, sect163k1, sect233k1, sect283k1, sect409k1, sect571k1, sect163r2, sect233r1, sect283r1, sect409r1, sect571r1, brainpoolP256r1, brainpoolP384r1, brainpoolP512r1.

Options

rsa2048 | rsa3072 | rsa4096 | prime192v1 | prime256v1 | secp192r1 | secp224r1 | secp256r1 | secp384r1 | secp521r1 | secp256k1 | sect163k1 | sect233k1 | sect283k1 | sect409k1 | sect571k1 | sect163r2 | sect233r1 | sect283r1 | sect409r1 | sect571r1 | brainpoolP256r1 | brainpoolP384r1 | brainpoolP512r1

--password <PASSWORD>

Password with which the output file will be encrypted. If not provided, the output will be unencrypted.

--force

Force overwriting of an existing file.

Arguments

PATH

Required argument