topic iMX8 Inline Encryption Engine in i.MX Processors

iMX8 Inline Encryption Engine

reinerseifried — Wed, 21 Jan 2026 13:52:01 GMT

How can I configure the IEE to encrypt/decrypt DDR content on the fly on the i.MX8QXP MEK board? I couldn't find any information in the MEK BSP.

What is the best practice? Is this configured in the Device Tree? Or at the U-Boot level via a special iee command? Is there maybe an application note about it?

Any advice is welcome.

Re: iMX8 Inline Encryption Engine

Manuel_Salas — Wed, 21 Jan 2026 20:38:14 GMT

Hello, @reinerseifried

I hope you are doing very well.

We have not Documentation to share, but it should be enough enabling the:

config BLK_INLINE_ENCRYPTION = y.

Please take a look to the inline-encryption.rst.

Best regards,

Salas.

Re: iMX8 Inline Encryption Engine

reinerseifried — Thu, 22 Jan 2026 10:15:15 GMT

Hi Manuel,

I probably expressed myself incorrectly. I did not mean “disk encryption,” but rather DDR in the sense of Double Data Rate Random Access Memory, also known as DRAM. There is even an erratum, ERR010909, for the controller, which literally states: “IEE operation is limited to DRAM, OCRAM and FlexSPI memory space only.” This IEE function is exactly what we want to apply to DRAM.

Best regards,

Reiner

Re: iMX8 Inline Encryption Engine

Manuel_Salas — Wed, 28 Jan 2026 02:25:44 GMT

Hello @reinerseifried

Thank you, It was my misunderstood.

Please take a look to the sc_fw_port. (System Controller Firmware Porting guide). There is described how to use it:

You can download it here: Embedded Linux for i.MX Applications Processors.

Then follow the instructions to build and get the documentation.

Best regards,

Salas.