OP-TEE with Secure Storage RPMB support on iMx8QM

matteo-facchinetti — Thu, 17 Feb 2022 09:18:54 GMT

Hi,

On iMx8QM, I need to use OP-TEE with the Secure Storage RPMB. I have turned on the related config options and it seems work properly.

Now, I want to implement also the tee_otp_get_hw_unique_key() and my strategy is to implements a MKVB module which retrieves the HUK, similar to has already done on iMx6.

https://github.com/OP-TEE/optee_os/pull/3608/commits/df90b3e278b4ee5b0216a7536b7b33fefa8f3e8c

Is this code useful also with the CAAM on imx8QM?

Idea is to turn on CAAM module porting this series of patches
https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/Enable-CAAM-accelerating-in-OP-TEE-on-i-MX8QXP-QM-platform-L4-14/ta-p/1102600
and then use the code mentioned above to retrive the HUK.

Is this feasible? or there is something that I have not considered.

All opinions are welcome!!!

Thanx in advance,

Matteo

Re: OP-TEE with Secure Storage RPMB support on iMx8QM

Zhiming_Liu — Fri, 25 Feb 2022 01:42:24 GMT

We have realize this function in our optee-os, you can see this https://source.codeaurora.org/external/imx/imx-optee-os/tree/core/drivers/crypto/caam/blob/caam_blob.c?h=lf-5.10.72_2.2.0

topic OP-TEE with Secure Storage RPMB support on iMx8QM in i.MX Processors

OP-TEE with Secure Storage RPMB support on iMx8QM

Re: OP-TEE with Secure Storage RPMB support on iMx8QM