LayerscapeのトピックRe: How to use SEC as OpenSSL engine.

How to use SEC as OpenSSL engine.

pomepome11 — Tue, 10 Sep 2019 10:09:28 GMT

Hi, I'm investigating how to use SEC as OpenSSL engine.
LSDK 19.06 manual explains Secure Object Library but it seems to use libtomcrypt in OPTEE to execute cryptographic operations rather than SEC.
So, please show me how to use SEC as cryptographic engine from OpenSSL.

My board is FRWY-LS1046A.

thanks.

Re: How to use SEC as OpenSSL engine.

pomepome11 — Tue, 10 Sep 2019 10:47:52 GMT

Oh, I found LSDK manual "9.1.1.3 Hardware Offloading with OpenSSL".

I'll read it.

Re: How to use SEC as OpenSSL engine.

pomepome11 — Wed, 11 Sep 2019 08:27:26 GMT

I want to use CAAM via Cryptoki not cryptodev.

However, "9.1.1.3Hardware Offloading with OpenSSL" explains the way to use CAAM via cryptodev.

Secure Object Library, which is explained in chapter 6.5 can be used by Cryptoki but cryptographic operations are executed with not CAAM but libtomcrypt in OPTEE.
I examined OPTEE source code and found it does not have patches to use CAAM.
So, It seems that there is no way to use CAAM via Cryptoki in LSDK19.06.

Here is my question.
- Can I get a CAAM driver for OPTEE ?
- If not, to use CAAM via Cryptoki, is it need to implement an alternative openssl engine, which uses cryptodev?

Re: How to use SEC as OpenSSL engine.

pomepome11 — Fri, 20 Sep 2019 05:30:33 GMT

This title does not follow which I want ask currently.
So, I will close this thread, and repost the case.