topic Linux support: fs encryption, CAN filtering, Watchdog? in i.MX Processors

Linux support: fs encryption, CAN filtering, Watchdog?

dominik_vogt_ex — Tue, 11 Sep 2018 13:00:36 GMT

Does the current Linux kernel fpr i.MX6 support:

1) Encrypting block devices and/or filesystems using hardware encryption via CAAM?

2) If not, encryption done by the kernel but using a key that is generated from the builtin hardware key or the master key from SNVS?

3) CAN-Filtering using the Flexcan interface?

4) Feeding the hardware watchdogs?

(Pointers to the relevant documentation for the Linux features are also very welcome.)

Re: Linux support: fs encryption, CAN filtering, Watchdog?

igorpadykov — Tue, 11 Sep 2018 23:02:37 GMT

Hi D. Vogt

for supported functionality one can look at nxp linux documentation

(Release Notes, Linux Manual) on

i.MX Software|NXP

Best regards
igor
-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: Linux support: fs encryption, CAN filtering, Watchdog?

dominik_vogt_ex — Wed, 12 Sep 2018 09:49:48 GMT

Thanks. Is the stuff in imx-yocto-L4.9.88_2.0.0.tar.gz what you mean?

The reference manual in there says nothing about how the actual crypto algorithms are used. As far as I understand, the kernel makes use of them automatically if you configure the device mapper to use them. There must be some side channel to tell the crypto module which key to use. Is there any further documentation on that topic?

Re: Linux support: fs encryption, CAN filtering, Watchdog?

igorpadykov — Thu, 13 Sep 2018 01:19:30 GMT

also one can look at

Q&A: Why is CAAM Driver Not Functioning in Linux for iMX6?

http://events17.linuxfoundation.org/sites/events/files/slides/2017-02%20-%20ELC%20-%20Hudson%20-%20Linux%20Cryptographic…

CAAM (Cryptographic Accelerator and Assurance Module)