topic Re: Cryptodev imx6UL in i.MX Processors

Cryptodev imx6UL

giuliodominutti — Fri, 10 Nov 2017 16:40:54 GMT

Hello, I'm trying to include and use the cryptodev module. I used this configuration

This is not enough to have /dev/crypto available? In my case it's not present.

My purpose is to run the text on CAAM with openssl test

openssl speed -evp aes-128-cbc -engine cryptodev

invalid engine "cryptodev"
1996162256:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:187:filename(/usr/lib/engines/libcry
ptodev.so): /usr/lib/engines/libcryptodev.so: cannot open shared object file: No such file or directory
1996162256:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:233:
1996162256:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:467:
1996162256:error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:390:id=cryptodev
1996162256:error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:187:filename(libcryptodev.so): libcr
yptodev.so: cannot open shared object file: No such file or directory
1996162256:error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:233:
1996162256:error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:467:

I'm missing something, do you have some advices? Thanks

Re: Cryptodev imx6UL

marius_grigoras — Fri, 10 Nov 2017 21:22:37 GMT

Hi,

Add the crypto-dev module to your image to enable OpennSSL call to the CAAM, adding next line to conf/local.conf:

-> CORE_IMAGE_EXTRA_INSTALL += "cryptodev-module cryptodev-tests”

And make sure your kernel Konfig is like bellow:

Kernel Konfig:
CONFIG_CRYPTO_DEV_FSL_CAAM=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SM=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SM_TEST=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SECVIO=y

Thank you,

Marius

Re: Cryptodev imx6UL

b36401 — Mon, 13 Nov 2017 01:50:04 GMT

In addition you can see the list of available engines in openssl structure under /usr/lib/.

By the way please note that our OS only enables cryptodev for accelerating symmetric algorithms and hashing algorithms, not support asymmetric algorithms.

Have a great day,
Victor

Re: Cryptodev imx6UL

giuliodominutti — Thu, 23 Nov 2017 14:44:41 GMT

I had compatibility problems, after kernel and fdt update I'm able to load the module. I have also another question linked to the usage of this module and dm-crypt (if some one tried this solution). Now that the module is loaded in /proc/crypto I can see available many caam driver, and if I use openSSL with this engine I can see an improvement in performances. But using dm-crypt with cryptsetup benchmark I don't see any performance improvements. Have some tips also on this ?

Thanks a lot again