i.MX6 - Android and hardware-backed KeyStore

andrzejdziedzic — Tue, 09 Jul 2019 13:41:08 GMT

Hi,

is it possible to have a hardware-backed KeyStore in the i.MX6 device with Android M6.0.1_2.0.0?

What should be implemented to use i.MX6 security functions by the KeyStore Android API?

Best regards,

Andrzej Dziedzic

Re: i.MX6 - Android and hardware-backed KeyStore

Yuri — Tue, 06 Aug 2019 05:48:17 GMT

Hello,

"As far as the trusty OS is concerned, NXP does not have hardware-backed Keystore implemented.

Thus currently the Software Keystore implementation by google can only be used.

However, Linaro has an implementation of the master key for android here

The safer approach for a pure android customer would be to go with trusty.

If one wants both a Linux and Android solution and want to keep compatibility between the 2, then it may

need to investigate optee."

Regards,

Yuri.