i.MX ProcessorsのトピックRe: Encrypting selective partitions

Encrypting selective partitions

gehariprasath — Mon, 23 Nov 2020 08:40:17 GMT

Hello,

We are making a custom telematics product using the IMX8M. We would like to know if its possible to encrypt selective partitions like the rootfs etc.Also we want to make sure encryption is done using the SoC's hardware blocks like CAAM. If there is any detailed documentation regarding how this can be achieved, please point us to the same.

Re: Encrypting selective partitions

Yuri — Tue, 24 Nov 2020 05:51:14 GMT

@gehariprasath

Hello,

App note AN12714 (i.MX Encrypted Storage Using CAAM Secure Keys), Rev. 1 — 11/2020,
describes how to use the DM-crypt.

https://www.nxp.com/docs/en/application-note/AN12714.pdf

Basically DM-crypt may be used to encrypt partitions, but we do not have examples
for it.

Regards,
Yuri.

Re: Encrypting selective partitions

gehariprasath — Mon, 30 Nov 2020 10:53:55 GMT

Hello Yuri

Thanks for sharing this document which I have gone through. The document explains encrypting partition using 'dmsetup'. We are looking at encrypting the root file system partition and few other partitions like user data partition etc. How does the kernel be able to mount the encrypted rootfs and other partitions ?