topic Re: caam-keygen source code for iMX8 in i.MX Processors

caam-keygen source code for iMX8

nxpuser_rb — Sat, 06 May 2023 01:14:56 GMT

Does anyone have an active link to the source code for the caam-keygen source code? I have a version of yocto embedded linux from Toradex that I built for the Apalis iMX8QM module. It runs successfully on the Toradex dev kit for the IXORA carrier board with the Apalis iMX8. I can load manually the linux modules required for dm-crypt, dm-mod, and trusted. The command "dmsetup targets" lists crypt. I can successfully follow the instructions in the i.MX Linux User's guide to encrypt/decrypt data on non-volatile storage using a CAAM trusted plain key, but the bsp does not include the utility caam-keygen utility required for encryption using CAAM tagged keys.

Can someone give the source for the caam-keygen utility? I have the arm cross compiler for the bsp, so I could build the utility separately and install it on the board.

Thanks

Re: caam-keygen source code for iMX8

Harvey021 — Sat, 06 May 2023 07:53:21 GMT

Hi @nxpuser_rb

You can find the source from the link: GitHub - nxp-imx/keyctl_caam: Keyctl CAAM Security

Best regards

Harvey

Re: caam-keygen source code for iMX8

nxpuser_rb — Tue, 09 May 2023 18:37:27 GMT

Hi Harvey,

Thank you for giving me the link for caam-keygen utility! I was able to download the files and to build the utility successfully for the Toradex Apalis-iMX8 dev kit that I've been using. After I transferred the utility to the embedded linux running on the dev kit, I was able to execute the steps successfully in the app note for encrypting and decrypting data with DM-Crypt and CAAM. The app note I've been using is AN12714,
i.MX Encrypted Storage Using CAAM Secure Keys Rev 2.

Thanks Again!!

Rick