i.MX ProcessorsのトピックRe: Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

PierreB — Thu, 08 Apr 2021 12:33:16 GMT

Hi,

We want to use the CAAM Secure keys on i.MX8 MMd.

I am following the Application Note AN12714 rev2 : i.MX Encrypted Storage Using CAAM Secure Keys.

Every step is succesful until I am stuck at step 3.2.4 page 6,

When entering :

caam-keygen create randomkeyCCM ccm -s 24

we get the following error :

Unable to open device /dev/caam-keygen

My understanding is that /dev/caam-keygen is not available on the kernel version we use (4.14.98). Is that correct ?

Is there a way, a workarround to add /dev/caam-keygen to our build ?

The application note uses the kernel version 5.4.47 (page 5, step 9).

What are the kernel versions that integrates /dev/caam-keygen ?

Thanks,

Pierre

Re: Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

Yuri — Fri, 09 Apr 2021 03:57:46 GMT

@PierreB
Hello,

Please try the previous AN12714 release (attached).

Regards,
Yuri.

Re: Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

PierreB — Fri, 09 Apr 2021 07:17:51 GMT

Thank you Yuri.

I think this is what i need. I will try it immediately.

regards,

Pierre

Re: Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

PierreB — Sat, 10 Apr 2021 16:50:16 GMT

Following the rev1 of the application note worked.

Thanks a lot Yuri.

Re: Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

dpatil — Thu, 18 Nov 2021 14:44:57 GMT

I am facing same issue.

and I also try previous release but getting following error:

add_key: No such device

is anything missing

Kernel version:5.4.85

Output of zcat /proc/config.gz | grep -i caam

is as following:

# CONFIG_CRYPTO_DEV_FSL_CAAM_DMA is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_COMMON=y
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SECVIO=y
CONFIG_CRYPTO_DEV_FSL_CAAM=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9
# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_TK_API=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_TEST is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_SM=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SM_SLOTSIZE=7
CONFIG_CRYPTO_DEV_FSL_CAAM_SM_TEST=m