AES Based Secure object creation - OPTEE

krishnanp — Thu, 27 May 2021 20:31:00 GMT

I am trying to create a AES based secure object. For this purpose, I have modified existing secure_storage application provided by NXP.

secure_storage_ta$ tree . ├── host │ ├── aes_data.h │ ├── Makefile │ ├── rsa_data.h │ ├── secure_storage │ ├── secure_storage.c │ └── secure_storage.o ├── LICENSE ├── Makefile ├── README.md └── ta ├── b05bcf48-9732-4efa-a9e0-141c7c888c34.dmp ├── b05bcf48-9732-4efa-a9e0-141c7c888c34.elf ├── b05bcf48-9732-4efa-a9e0-141c7c888c34.map ├── b05bcf48-9732-4efa-a9e0-141c7c888c34.stripped.elf ├── b05bcf48-9732-4efa-a9e0-141c7c888c34.ta ├── include │ ├── securekey_api_types.h │ ├── secure_storage_common.h │ └── ta_secure_storage.h ├── Makefile ├── secure_storage_aes.c ├── secure_storage_aes.o ├── secure_storage_common.c ├── secure_storage_common.o ├── secure_storage_create.c ├── secure_storage_create.o ├── secure_storage_crypto.c ├── secure_storage_crypto.o ├── secure_storage_db.c ├── secure_storage_db.o ├── secure_storage_ec.c ├── secure_storage_ec.o ├── secure_storage_entry.c ├── secure_storage_entry.o ├── secure_storage_find.c ├── secure_storage_find.o ├── secure_storage_generate.c ├── secure_storage_generate.o ├── secure_storage_helper.c ├── secure_storage_helper.o ├── secure_storage_rsa.c ├── secure_storage_rsa.o ├── sub.mk ├── ta.lds ├── user_ta_header_defines.h └── user_ta_header.o

Added support for AES key type.

However, when I run the secure_storage application getting an error bad parameter.

TEEC_InvokeCommand failed with code 0xffff0006

Suspect something is missing in the attributes passed to TEEC_InvokeCommand.

Below it the modified attribute structure

SK_OBJECT_TYPE obj_aes = SK_SECRET_KEY; uint32_t obj_id_aes = 1; SK_KEY_TYPE key_aes = SKK_AES; uint32_t key_len_aes = 16; char label_aes[] = "Device_Key_AES"; static const uint8_t key_val_aes[] = { 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f, 0x70 };

I believe I miss something in attribute structure. Any help? I am new to optee.

Appreciate your help.

Re: AES Based Secure object creation - OPTEE

yipingwang — Fri, 28 May 2021 07:33:25 GMT

Please refer to "4. Develop OP-TEE Trusted Application " in https://community.nxp.com/t5/QorIQ-Knowledge-Base/OP-TEE-Trusted-Application-on-QorIQ-ARM-Based-Processors/ta-p/1099217

topic AES Based Secure object creation - OPTEE in Layerscape

AES Based Secure object creation - OPTEE

Re: AES Based Secure object creation - OPTEE