i.MX ProcessorsのトピックImx8 CAAM key storage

Imx8 CAAM key storage

Erno — Thu, 17 Aug 2023 13:01:58 GMT

Hello,

I am currently working on an imx8 platform where we want to create a secure key storage.
I have read that the CAAM module provides secure key storage. If I understand correctly the Secure Non-Volatile Storage is present to achieve this. However, it is unclear to me how we can persist keys in this.

The only document I come across is AN12714.
However, this describes how to store keys externally encrypted, but not how to store them in the key storage of the CAAM module.

Can someone explain to me how we can use the CAAM as Secure Non-Volatile Storage?

Thanks.

Kind regards,

Erno

Re: Imx8 CAAM key storage

ramprakash08 — Fri, 18 Aug 2023 12:29:33 GMT

Hi,

Yes, you are correct. The CAAM on the i.MX8 platform does provide secure key storage. The secure non-volatile storage you mentioned is part of this module. To use the CAAM as secure non-volatile storage, you will need to use the Job Ring module within the CAAM.

This module is responsible for managing and executing security jobs, including key storage. The keys are stored in the secure memory of the CAAM, which is only accessible by the CAAM itself.

Regards

Re: Imx8 CAAM key storage

Bio_TICFSL — Fri, 18 Aug 2023 12:52:38 GMT

Good (y)

Re: Imx8 CAAM key storage

Erno — Tue, 22 Aug 2023 07:37:24 GMT

Ok, is there any concrete example / application note on how to do this?

Thanks,

Erno

Re: Imx8 CAAM key storage

philbot991 — Sat, 26 Aug 2023 21:48:38 GMT

I am interested in this too. Is there an application note that details how to “use the job ring” to use the CAAM as secure nonvolatile storage? Thank you.

Re: Imx8 CAAM key storage

Erno — Mon, 28 Aug 2023 07:09:58 GMT

We are going to use the encryption route as that is the only method I find documentation about.

I cannot find anything on using the CAAM as a key store.