topic Re: Security Engine of LS1021A in Layerscape

Security Engine of LS1021A

tecuelee — Mon, 30 May 2016 09:51:26 GMT

I am currently being developed based on LS1021A-IoT.
I have a difficulty with respect to Security engine.
I try to change the api using security engine instead using S/W openssl.
It applied as follows, but there is little change in speed.

root@OpenWrt:/# modprobe cryptodev
[ ] cryptodev: driver 1.8 loaded
root@OpenWrt:/# openssl engine
(cryptodev) BSD cryptodev engine
(dynamic) Dynamic engine loading support

What went wrong? Or seek advice.

Re: Security Engine of LS1021A

bpe — Mon, 30 May 2016 13:02:19 GMT

Enabling cryptodev driver alone does not offload crypto jobs to the

hardware. You should also enable the hardware (CAAM in your case)

driver. Suggestions:

1. Use NXP QorIQ SDK:

http://www.nxp.com/products/software-and-tools/run-time-software/linux-sdk/linux-sdk-for-qoriq-processors:SDKLINUX

2. Follow the SDK documentation:

https://freescale.sdlproducts.com/LiveContent/content/en-US/QorIQ_SDK/GUID-70AB1917-E7BD-45DB-924C-7545993E6F7E

https://freescale.sdlproducts.com/LiveContent/content/en-US/QorIQ_SDK/GUID-FD8EAB86-C554-4D24-9B50-F1DA6462F298

Have a great day,
Platon

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: Security Engine of LS1021A

tecuelee — Tue, 31 May 2016 07:05:32 GMT

P{font-size:14px; line-height:16em; margin-left:0; margin-top:0;

margin-right:0; margin-bottom:0; font-family:맑은 고딕;}

Dear bpe

I thank you for your quick reply

My situation is the same

root@OpenWrt:/# modprobe cryptodev

cryptodev: driver 18 loaded

root@OpenWrt:/# openssl version

OpenSSL 101g 7 Apr 2014

root@OpenWrt:/# openssl engine

(cryptodev) BSD cryptodev engine

(dynamic) Dynamic engine loading support

root@OpenWrt:/# modprobe tcrypt

modprobe: FATAL: Module tcrypt not found

root@OpenWrt:/# grep tls /proc/crypto

name :

tls10(hmac(sha1),cbc(aes))

driver : tls10-hmac-sha1-cbc-aes-caam

root@OpenWrt:/# cat /proc/interrupts | grep -i qman

root@OpenWrt:/#

root@OpenWrt:/# cat /proc/interrupts | grep jr

135:

0 GIC 135 1710000jr

136:

0 GIC 136 1720000jr

137:

0 GIC 137 1730000jr

138:

0 GIC 138 1740000jr

How can I check the CAAM features on LS1021A-IoT platforms?

How can I use the Security engine acceleration with OpenSSL, cryptodev,

CAAM?

My company is a company that specializes in the development api

Perhaps, is there any sample application that can use CAAM features?

regards,

Tecue Lee

JEENWOO R&D Manager