https://community.nxp.com/t5/i-MX-Processors/CAAM-RNG-error-in-i-MX-6SX-SABRE-SD/m-p/1402590#M186068 <P>Hi,</P><P>We're using <STRONG>Yocto hardknott</STRONG> with Linux kernel version "<STRONG>5.10.52-lts-5.10.y+ga11753a89ec6</STRONG>". Today, suddenly we ran into a <FONT color="#FF0000">problem with CAAM's RNG</FONT> (earlier it worked as expected in the same hardware but with old kernel builds) that it raises the followin error:</P><PRE>[ 51.708670] caam_jr 2102000.jr: 20003c5b: CCB: desc idx 60: RNG: Hardware error<BR />[ 51.716162] caam_jr 2102000.jr: Failed to execute black key descriptor<BR />[ 51.722707] caam_jr 2102000.jr: Black key generation failed: (-22)</PRE><P>It prints continuously on the screen and pollutes it. It also caused the CAAM' related functions to fail</P><P>Finally we solved it following the <EM><A title="HRNG in CAAM isn't working properly on IMX6 SoloX" href="https://lore.kernel.org/lkml/YSy%2FPFrem+a7npBy@gmail.com/#:~:text=Removing%20OP_ALG_PR_ON%20in%20caam_init_desc()%20from%20drivers/crypto/caam/caamrng.c%0Aseems%20to%20fix%20the%20problem" target="_blank" rel="noopener">discussion on the Linux kernel mailing list</A></EM>. The solution involvs modifying the "caamrng.c" file. Now our questions are,</P><OL><LI><FONT size="5">Is this workaround/fix poses any security threat?</FONT></LI><LI><FONT size="5">Is this issue observed across all the i.MX 6SX?</FONT></LI><LI><FONT size="5">Will it get fixed on the next kernel revision by NXP?</FONT></LI></OL> Thu, 20 Jan 2022 11:14:14 GMT kanimozhi_t 2022-01-20T11:14:14Z https://community.nxp.com/t5/i-MX-Processors/CAAM-RNG-error-in-i-MX-6SX-SABRE-SD/m-p/1402590#M186068 <P>Hi,</P><P>We're using <STRONG>Yocto hardknott</STRONG> with Linux kernel version "<STRONG>5.10.52-lts-5.10.y+ga11753a89ec6</STRONG>". Today, suddenly we ran into a <FONT color="#FF0000">problem with CAAM's RNG</FONT> (earlier it worked as expected in the same hardware but with old kernel builds) that it raises the followin error:</P><PRE>[ 51.708670] caam_jr 2102000.jr: 20003c5b: CCB: desc idx 60: RNG: Hardware error<BR />[ 51.716162] caam_jr 2102000.jr: Failed to execute black key descriptor<BR />[ 51.722707] caam_jr 2102000.jr: Black key generation failed: (-22)</PRE><P>It prints continuously on the screen and pollutes it. It also caused the CAAM' related functions to fail</P><P>Finally we solved it following the <EM><A title="HRNG in CAAM isn't working properly on IMX6 SoloX" href="https://lore.kernel.org/lkml/YSy%2FPFrem+a7npBy@gmail.com/#:~:text=Removing%20OP_ALG_PR_ON%20in%20caam_init_desc()%20from%20drivers/crypto/caam/caamrng.c%0Aseems%20to%20fix%20the%20problem" target="_blank" rel="noopener">discussion on the Linux kernel mailing list</A></EM>. The solution involvs modifying the "caamrng.c" file. Now our questions are,</P><OL><LI><FONT size="5">Is this workaround/fix poses any security threat?</FONT></LI><LI><FONT size="5">Is this issue observed across all the i.MX 6SX?</FONT></LI><LI><FONT size="5">Will it get fixed on the next kernel revision by NXP?</FONT></LI></OL> Thu, 20 Jan 2022 11:14:14 GMT https://community.nxp.com/t5/i-MX-Processors/CAAM-RNG-error-in-i-MX-6SX-SABRE-SD/m-p/1402590#M186068 kanimozhi_t 2022-01-20T11:14:14Z