i.MX Processors中的主题 Re: Using ZMK for blobs

Using ZMK for blobs

eren_yilmaz — Thu, 12 Sep 2019 07:26:30 GMT

Thanks Yuri.

As a workaround for SEC_CONFIG being not set, can I use ZMK since that can be set in a non-secure mode, and have CAAM use that for blob encapsulation and decapsulation?

Re: Using ZMK for blobs

Yuri — Fri, 13 Sep 2019 07:09:03 GMT

Hello,

from i.MX6 Security RM:

When the chip is in the non-secure state, CAAM cannot decapsulate blobs that were
encapsulated while CAAM was in a trustworthy state (either secure state or trusted state).

Have a great day,
Yuri

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.

Re: Using ZMK for blobs

eren_yilmaz — Fri, 13 Sep 2019 07:41:50 GMT

Hello Yuri,

Yes I know that. But my question is for operations in non-secure state.

Can CAAM use ZMK to encapsulate and decapsulate blobs in a non-secure state?

Re: Using ZMK for blobs

Yuri — Mon, 16 Sep 2019 07:57:59 GMT

Hello,

In non-secure mode a fixed default key with a known value is used in place of the master key.

Regards,

Yuri.

Re: Using ZMK for blobs

eren_yilmaz — Mon, 16 Sep 2019 08:00:26 GMT

Hi Yuri,

So ZMK cannot be used in non-secure mode with CAAM? Instead of that default known key.

Thanks

Re: Using ZMK for blobs

Yuri — Tue, 17 Sep 2019 04:50:49 GMT

Correct, ZMK cannot be used in non-secure mode with CAAM.

~Yuri.