https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1363769#M182311 <P>We need to verify your NDA and then send you the information. It is better to create a ticket for this.</P> <P><A href="https://support.nxp.com/s/" target="_blank">https://support.nxp.com/s/</A></P> <P>&nbsp;</P> <P>Thanks.</P> Fri, 29 Oct 2021 08:36:47 GMT jimmychan 2021-10-29T08:36:47Z https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1362469#M182211 <DIV>We want to perform authentication with CAAM and OP-TEE without revealing private key (just keep it in CAAM). We are using i.MX8MM and branch 5.4.70_2.3.0 with corresponding kernel and u-boot.</DIV><DIV>This is typical scenario:<BR /><UL><LI>generate public key to corresponding private key (without revealing it at any step, the best is to use secure world) and send it to backend</LI><LI>pass data to TA (trusted application), decrypt data encrypted by public key, solve challenge, encrypt it and send back to backend&nbsp;</LI></UL><DIV>We have troubles in understanding, some details:</DIV><DIV><UL><LI>Is the proposed scenario possible? We considered options like creating black key blobs (AN12838) in OP-TEE or using manufacturing protection (AN13222) - are we on the right track?</LI><LI>We have seen a repository <A href="https://source.codeaurora.org/external/imxsupport/imx_sec_apps/" target="_blank" rel="noopener">https://source.codeaurora.org/external/imxsupport/imx_sec_apps/</A>, however it is hard to figure out whether our idea is possible or not. Do you have more detailed examples or documentation?</LI><LI>Is it possible to simultaneously use CAAM from OP-TEE and from kernel?</LI><LI>We have seen support mostly for 4.14, is 5.4 supported as well?</LI></UL><DIV>We would appreciate any feedback and/or suggestions. It would be extremely helpful to receive relevant documentation and/or examples.<BR /><BR />Moreover we would like to have access to document <FONT size="2"><SPAN><SPAN><SPAN><SPAN><A href="https://community.nxp.com/docs/DOC-343388" target="_blank" rel="noopener"><FONT size="3">https://community.nxp.com/docs/DOC-343388</FONT></A></SPAN></SPAN></SPAN></SPAN></FONT><FONT size="2"><SPAN><SPAN><SPAN><SPAN><FONT size="3">,</FONT></SPAN><FONT size="3" color="#333333"> however from my account access is denied. We have signed NDA with NXP, could you grant me access to mentioned document?</FONT></SPAN></SPAN></SPAN></FONT></DIV></DIV></DIV> Wed, 27 Oct 2021 13:25:55 GMT https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1362469#M182211 M_J 2021-10-27T13:25:55Z https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1363769#M182311 <P>We need to verify your NDA and then send you the information. It is better to create a ticket for this.</P> <P><A href="https://support.nxp.com/s/" target="_blank">https://support.nxp.com/s/</A></P> <P>&nbsp;</P> <P>Thanks.</P> Fri, 29 Oct 2021 08:36:47 GMT https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1363769#M182311 jimmychan 2021-10-29T08:36:47Z https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1364485#M182409 <P>Hi <a href="https://community.nxp.com/t5/user/viewprofilepage/user-id/1422">@jimmychan</a>&nbsp;<BR />I have created ticket as you requested.<BR />Is it enough to proceed with the issue?</P> Mon, 01 Nov 2021 10:01:00 GMT https://community.nxp.com/t5/i-MX-Processors/Keys-creation-with-CAAM-and-OP-TEE/m-p/1364485#M182409 M_J 2021-11-01T10:01:00Z