i.MX Processors中的主题 Re: i.MX 8X Encrypted Boot

i.MX 8X Encrypted Boot

jmcdowell — Mon, 14 Jun 2021 21:18:42 GMT

I just read in the IMX8DQXPRM the note at the end of section 5.9.6 that says "The booting of encrypted images is not currently available. Please contact your local NXP representative for more details."

Earlier in the reference manual in the System Security chapter, "Encrypted Boot" is listed as a feature of the CAAM within the list of SECO supported features.

Please clarify this conflicting information so we can proceed with our system design concept accordingly.

Justin

Re: i.MX 8X Encrypted Boot

Yuri — Tue, 15 Jun 2021 06:25:41 GMT

@jmcdowell
Hello,

please refer to i.MX8X Security Reference Manual, section "Booting Encrypted Images".

https://www.nxp.com/webapp/sps/download/mod_download.jsp?colCode=IMX8QXPSRM&appType=moderatedWithoutFAE

Regards,
Yuri.

Re: i.MX 8X Encrypted Boot

jmcdowell — Wed, 16 Jun 2021 13:15:16 GMT

Thank you for your quick response. I will continue to work with my company in order to establish an NDA in order to get access to the security reference manual.

Justin

Re: i.MX 8X Encrypted Boot

jmcdowell — Tue, 22 Jun 2021 18:49:49 GMT

Yuri,

My company has completed the NDA and so I now have access to the i.MX8X Security Reference Manual. Specifically IMX8QXPSRM Rev. B, 03/2019.

I have referenced the section "Booting Encrypted Images" as you directed and I find the same note: "The booting of encrypted images is not currently available. Please contact your local NXP representative for more details".

How do I access the "more details" referenced in the note here? Is this a SECO FW feature that NXP intends to support according to a roadmap that I could compare against my project's needs? Is it a mkimage limitation that can be resolved? Is it something that has already been resolved since the documentation publication 2 years ago? Or is it actually not supported in the SECO ROM and/or hardware, in which case I'm confused as to why it is described elsewhere in the documentation.

Thanks,

Justin

Re: i.MX 8X Encrypted Boot

Yuri — Wed, 23 Jun 2021 04:24:53 GMT

@jmcdowell
Hello,

I've sent You some considerations. Hope it helps.

Regards,
Yuri.

Re: i.MX 8X Encrypted Boot

jmcdowell — Wed, 23 Jun 2021 14:29:56 GMT

Thanks, I'll take a look.

Re: i.MX 8X Encrypted Boot

Yuri — Thu, 24 Jun 2021 03:54:12 GMT

@jmcdowell
Hello,

also:

https://source.codeaurora.org/external/imx/uboot-imx/tree/doc/imx/ahab/guides/mx8_mx8x_encrypted_boot.txt?h=imx_v2020.04_5.4.70_2.3.0

Regards,
Yuri.