i.MX ProcessorsのトピックRe: encrypt and decrpt kernel Image, dtb, intramfs

encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Tue, 04 Aug 2020 05:23:32 GMT

Hello everybody,

I'm looking for a solution to my problem, I'm working on imx8M and I have a secure u-boot that is capable to authenticate the signature of the kernel.

I want to know is there a way to encrypt kernel Image , dtb and intramfs (all in boot partition) and decrypt all of them via u-boot.?

Please help me with this or show a path how should I proceed?

Thank you in advance

Re: encrypt and decrpt kernel Image, dtb, intramfs

joanxie — Thu, 06 Aug 2020 03:57:55 GMT

this is about secure boot which is under NDA, we couldn't share these in the public community, if you have NDA, pls let me know it, I can send them to you directly

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Thu, 06 Aug 2020 06:06:33 GMT

Thank you Joan Xie for your reply. I do not have NDA as such. How can sign one?

I see there is documentation for imx6 for encryption of uboot, but there is no document or procedure for IMX8 uboot encryption. Does it mean IMX8 also uses same logic as IMX6 for encryption of u-boot?

Ofcourse there is documentation for secure boot for both IMX6 and IMX8 , this is what confuses me.

Please share some thought on this :smileyhappy:

Re: encrypt and decrpt kernel Image, dtb, intramfs

joanxie — Mon, 10 Aug 2020 08:26:15 GMT

I have create a NDA request for you, if you get NDA, pls forward to me, any update you can mail to me in the case

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Mon, 10 Aug 2020 08:34:00 GMT

Thank you, I just forward the NDA to admin@community.nxp.com

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Tue, 11 Aug 2020 05:04:46 GMT

Hallo Joan Xie,

I forwarded the NDA , Please could you confirm it whether you recived it?

Re: encrypt and decrpt kernel Image, dtb, intramfs

joanxie — Tue, 11 Aug 2020 08:15:04 GMT

I have mailed to you, pls reply to me directly in the case

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Tue, 18 Aug 2020 06:23:28 GMT

Hi Joan Xie,

I have uploaded the NDA in doc store. I am not able to send the mail to you, Could you please share your email address, so that I can send the NDA to you.

Thank you

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Wed, 19 Aug 2020 11:08:06 GMT

Hi joanxie

I have uploaded the NDA in doc store.

Please provide me necessary documentation for authenticatioon process

Thank you :smileyhappy:

Re: encrypt and decrpt kernel Image, dtb, intramfs

joanxie — Fri, 21 Aug 2020 08:55:56 GMT

is this your mail address manjunath.bentur@erweka.com?? I have created a new case to you and mailed to you many times, but didn't get any feedback from you, pls let me know it if you receive any mail? if yes pls reply to me directly

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Fri, 21 Aug 2020 09:02:10 GMT

Hi joanxie‌,

Yes the email is correct. Thank you once again for your help.

I did not receive any documents from you.

If not then you can send the docs to alternative email address : "manjubb2@gmail.com" If this is ok for you.

Thank you once again and sorry

Re: encrypt and decrpt kernel Image, dtb, intramfs

joanxie — Mon, 24 Aug 2020 09:06:10 GMT

I have uploaded, you can login the case and download it

Re: encrypt and decrpt kernel Image, dtb, intramfs

manjunath_bentu — Tue, 25 Aug 2020 05:20:54 GMT

Hi Joan Xie, I received your documents. The document is about signed uboot , But I am looking for encryption and decryption of uboot for imx8m.

In the documents there is no mention of DEK.bin file for decryption

Please send these related documents for my case.

Looking forward for your reply.