i.MX Processors中的主题 Re: Encrypted Storage Using CAAM Secure Keys

Encrypted Storage Using CAAM Secure Keys

golebiowski_bar — Thu, 11 Feb 2021 10:43:09 GMT

Hello,

This is my kernel version: 4.14.98-cl-som-imx7-6.3, so I'm using this datasheet for encrypt my data storage: AN12714 from 25 February 2020.

I have problem with keyctl. When I want to create secure key I get this communicate: add_key: No such device. What kind of driver I should install? I don't have these dependencies:

CONFIG_CRYPTO_DEV_FSL_CAAM_DESC=y

CONFIG_CRYPTO_DEV_FSL_CAAM_UTIL_BLACK_KEY=y

CONFIG_CRYPTO_DEV_FSL_CAAM_UTIL_BLOB=y

CONFIG_CRYPTO_DEV_FSL_CAAM_TK_API=y

CONFIG_CAAM_KEYS=y

in my kernel version. But I have similar ones:

# Random Number Generation
#
# CONFIG_CRYPTO_ANSI_CPRNG is not set
CONFIG_CRYPTO_DRBG_MENU=y
CONFIG_CRYPTO_DRBG_HMAC=y
# CONFIG_CRYPTO_DRBG_HASH is not set
# CONFIG_CRYPTO_DRBG_CTR is not set
CONFIG_CRYPTO_DRBG=y
CONFIG_CRYPTO_JITTERENTROPY=y
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
# CONFIG_CRYPTO_USER_API_RNG is not set
CONFIG_CRYPTO_USER_API_AEAD=y
CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_DEV_HIFN_795X is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_COMMON=y
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_KEYBLOB_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SECVIO=y
CONFIG_CRYPTO_DEV_FSL_CAAM=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9
# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_TK_API=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_TK_API_TEST is not set
# CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_TEST is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_SM=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SM_SLOTSIZE=7
# CONFIG_CRYPTO_DEV_FSL_CAAM_SM_TEST is not set
# CONFIG_CRYPTO_DEV_SAHARA is not set
# CONFIG_CRYPTO_DEV_MXC_SCC is not set
# CONFIG_CRYPTO_DEV_MXS_DCP is not set
CONFIG_CRYPTO_DEV_VIRTIO=y
# CONFIG_ASYMMETRIC_KEY_TYPE is not set

Best regards

Re: Encrypted Storage Using CAAM Secure Keys

Yuri — Thu, 11 Feb 2021 11:48:12 GMT

@golebiowski_bar
Hello,

Use also section 9.5 (Disk encryption acceleration)
of "IMX_LINUX_USERS_GUIDE.pdf"

https://www.nxp.com/docs/en/user-guide/IMX_LINUX_USERS_GUIDE.pdf

Regards,
Yuri.

Re: Encrypted Storage Using CAAM Secure Keys

golebiowski_bar — Thu, 11 Feb 2021 14:52:22 GMT

I enabled all dependencies and install all packages described in user guide. But still the same issue. Maybe this will help?

https://github.com/f-secure-foundry/caam-keyblob

Re: Encrypted Storage Using CAAM Secure Keys

Yuri — Mon, 15 Feb 2021 11:11:42 GMT

@golebiowski_bar
Hello,

Do You use Ubuntu 16.04 on the host?

Regards,
Yuri

Re: Encrypted Storage Using CAAM Secure Keys

golebiowski_bar — Tue, 23 Feb 2021 09:25:28 GMT

System:    Kernel: 5.4.0-26-generic x86_64 bits: 64 compiler: gcc v: 9.3.0 Desktop: Cinnamon 4.6.7 
           wm: muffin dm: LightDM Distro: Linux Mint 20 Ulyana base: Ubuntu 20.04 focal

Re: Encrypted Storage Using CAAM Secure Keys

Yuri — Wed, 24 Feb 2021 04:49:16 GMT

@golebiowski_bar
Hello,

Could You try Ubuntu 16 ?

Regards,
Yuri.

Re: Encrypted Storage Using CAAM Secure Keys

golebiowski_bar — Fri, 26 Feb 2021 14:29:16 GMT

The problem is with missing driver, not with keyctl.