topic Re: MX8MN: encrypted images do not boot in i.MX Processors

MX8MN: encrypted images do not boot

MikeEngel — Tue, 01 Dec 2020 08:44:22 GMT

we have successfully implemented signing SPL and u-boot image. Now we want to encrypt the SPL and U-boot but the images never boot. I have tried on an open and closed device. On both I have the same behavior. I followed the steps at doc/imx/habv4/guides/mx8m_encrypted_boot.txt and had to figure out that the dek_blob command requires the length of the dek in hex and not in decimal. But even so no boot when images are encrypted.

Are their any documents how to encrypt and sign an SPL and u-boot image?

What could be the reason why the SPL in not decrypted?

Best regards,

Mike

Re: MX8MN: encrypted images do not boot

Yuri — Thu, 03 Dec 2020 08:29:52 GMT

@MikeEngel
Hello,

I've sent You some comments directly.

Regards,
Yuri.

Re: MX8MN: encrypted images do not boot

MikeEngel — Fri, 11 Dec 2020 12:30:41 GMT

I finally found the problems. I had to use 128Bit dek blob encryption to make it work and add a dek blob dummy file to the u-boot image.

Thanks,

Mike