Home ·

- SAM-BA pairingmode applet

# SAM-BA pairingmode applet

The pairingmode applet translates some bootstrap master image into another bootstrap image, which is paired to the target device.

Hence, the pairingmode applet can be run only through a connection to the secure SAM-BA monitor as it assumes the bootstrap master image to be ciphered with the AES-256-CBC algorithm using the secret customer key.

This customer key must have been programmed into the target device, with the write_customer_key built-in monitor command, prior to execute the pairingmode applet.

Also the paring mode must be enabled after the customer key has been programmed, running the enable_pairing built-in monitor command.

## Applet initialization

The pairingmode applet accepts a single mandatory parameter, algo.

    $ sam-ba -p secure -d sam9x60 -a pairingmode:help
    Syntax: pairingmode:[<algo>]
    Parameters:
        algo            Signature algorithm for authentication (cmac or rsa)
    Examples:
        pairingmode:cmac  Signature algorithm is set to AES-256-CMAC
        pairingmode:rsa   Signature algorithm is set to RSA

## Supported commands

The list of commands supported by the pairingmode applet can be displayed with the following command:

    $ sam-ba -p secure -d sam9x60 -a pairingmode -c help

### The translate command

The translate command transforms the input stream of binary data, loaded from the bootstrap master image file <master_input>, into the output stream of binary data, saved into the bootstrap paired image file <paired_output>.

    $ sam-ba -p secure -d sam9x60 -a pairingmode -c translate:help
    * translate - convert a bootstrap master image into a bootstrap paired image
    Syntax:
        translate:<master_input>:<paired_output>
    Examples:
        translate:at91bootstrap.cip:at91bootstrap_paired.cip