topic Re: imx8mm HAB events encrypted storage using CAAM in i.MX Processors

imx8mm HAB events encrypted storage using CAAM

ervosfo — Wed, 22 Nov 2023 21:18:42 GMT

Hi I have secure boot hab and encrypted storage with CAAM running on a imx8mm board.
As described in application note AN12714.

Is it normal that CAAM also decrypts data with black key blob if hab events have previously occurred during boot due to loading/verifying unsigned code?
I would have expected the CAAM engine to stop working and become unavailable as soon as a HAB event occurred.

Re: imx8mm HAB events encrypted storage using CAAM

Harvey021 — Fri, 24 Nov 2023 10:02:35 GMT

That is normal. HAB event doesn't affect CAAM, except for CAAM Engine fail such case.

Regards

Harvey

Re: imx8mm HAB events encrypted storage using CAAM

ervosfo — Fri, 24 Nov 2023 10:39:19 GMT

ok, thank you for the confirmation