topic Re: imx6ul： RSA 2048 bit key generation in CAAM acceleration in i.MX Processors

imx6ul： RSA 2048 bit key generation in CAAM acceleration

juan_tang — Fri, 05 May 2023 03:08:57 GMT

HI sir,

Platform：imx6ul

BSP:L4.1.15_ 2.0.0_ GA's patch

Function:RSA 2048 bit key generation in CAAM acceleration

Need support:

I refer to the three patches in the link below,

#Enhance cryptodev and its engine in OpenSSL by CAA... - NXP Community

then RSA acceleration, found that the generated key is invalid. checking the code, I feel like In function cryptodev_bn_miller_rabin( ) ,The return value judgment of the function cryptodev_bn_check_small_factors( ) is not comprehensive and may result in misjudgment. After trying to make the corrections, the key generated is normal, but the speed is slower than that of OpenSSL pure software. How fast can I generate 2048bit keys by using RSA hardware acceleration normally? Is there an optimized version of this patch?

Re: imx6ul： RSA 2048 bit key generation in CAAM acceleration

kef2 — Fri, 05 May 2023 06:53:55 GMT

he return value judgment of the function cryptodev_bn_check_small_factors( ) is not comprehensive and may result in misjudgment. After trying to make the corrections, the key generated is normal,

Could you provide your variant, please?

but the speed is slower than that of OpenSSL pure software.

Hashes and encryption are as well slower for smaller data blocks, yet it still offloads CPU and CPU can do other tasks while waiting for crypto result. If you generate just few RSA keys, it may have no sense to use CAAM for RSA, it depends on app.

Re: imx6ul： RSA 2048 bit key generation in CAAM acceleration

Harvey021 — Mon, 08 May 2023 08:54:15 GMT

Hi @juan_tang

Use cryptodev, mainly offload CPU at present. The performance is not as good as the CPU.

Best regards

Harvey

Re: imx6ul： RSA 2048 bit key generation in CAAM acceleration

juan_tang — Tue, 09 May 2023 01:26:05 GMT

Got it ,thanks for your support