topic Re: Security and Related Tools - wall comments in i.MX Processors

Security and Related Tools - wall comments

admin — Fri, 02 Sep 2011 13:45:16 GMT

The focus of this group is security and its tools issues, which cover topics about on-chip security features and settings. The group’s focus covers these issues for all i.MX devices and OS’s.

Re: Security and Related Tools - wall comments

sujataneidig — Wed, 11 Apr 2012 17:22:48 GMT

Hi, This presentation covers aspects of using security on the i.MX28 and i.MX53. It was presented at last year's FTF and has recently been updated with more information.

GW: See attachment in post below.

Regards,

Grant

Re: Security and Related Tools - wall comments

ronaldbenvenutt — Fri, 25 May 2012 15:12:03 GMT

Hi, we are developing a security product using imx258, and this is useful. Could someone please send the ZIP files associated to the presentation ?

Re: Security and Related Tools - wall comments

sujataneidig — Fri, 25 May 2012 20:18:58 GMT

Ronald, what specific files are you looking for? The CST files are on our website. Go to www.freescale.com and search for "IMX_CST_TOOL".

Re: Security and Related Tools - wall comments

ronaldbenvenutt — Mon, 28 May 2012 10:48:50 GMT

Hello Sujata :

I need the ZIP file(s) of pages 49, 50 and 51 of the last PDF presentation (apr 27)..

Re: Security and Related Tools - wall comments

ronaldbenvenutt — Mon, 28 May 2012 10:49:35 GMT

Note : we already have the CST files.

Re: Security and Related Tools - wall comments

ronaldbenvenutt — Mon, 28 May 2012 11:10:03 GMT

Hello Sujata :

Additional info : we are including security function on our product already running without security using i.mx258. This micro doesn't have examples, so we are adapting from imx53 and imx28. If you have some example or info specific of i.mx258, it would be welcome.

Re: Security and Related Tools - wall comments

GopuSubramanian — Tue, 29 May 2012 16:41:26 GMT

Hello Sujata,

We are trying to develop a open source trustzone software framework. I would like to know whether we have imx6 based open board to try the trustzone feature.

www.openvirtualization.org

Re: Security and Related Tools - wall comments

sujataneidig — Fri, 01 Jun 2012 20:37:07 GMT

Gopu,

The i.MX 6 Series has not gone through a full market launch yet. However, we do have partners who are offering embedded board solutions.Here's a link with available solutions at this time: http://imxcommunity.org/profiles/blogs/i-mx6-boards.

Re: Security and Related Tools - wall comments

rodz — Sun, 03 Jun 2012 17:14:50 GMT

To add to Sujata's comments, i.MX 6 in addition to the i.MX5 famility all support TrustZone. There is no restriction on the use of TrustZone on any of these ICs. The cores boot natively to the secure world.

Re: Security and Related Tools - wall comments

hersioiwamoto — Thu, 21 Jun 2012 16:37:01 GMT

Hi Sujata,

I am interested on enabling HAB on iMx53.

I have received many information under NDA, but still not able to deploy it. We don´t know where the error is.

How can I get help? How to debug it?

Re: Security and Related Tools - wall comments

rajansoma — Fri, 22 Jun 2012 05:04:12 GMT

hi sujata,

We are company from hyderabad India, working on imx258.

We are using IMX258 but we want to implement security feature which is pci complaint. Use SCC for secure pin encryption with TMK management from bank side.

We need a good webinar or training material on hab/SCC/Drye ice

Re: Security and Related Tools - wall comments

neerajsrivastav — Sat, 01 Dec 2012 12:25:07 GMT

Hi Sujata,

Can you provide the i.MX_TrustArchitecture_23Mar12.pdf PDF again as the above link is showing error while loading the Page.

If possible provide any other document which tells about the implementation of the TrustZone on IMX53/IM6 Sololite.

Re: Security and Related Tools - wall comments

YuryGeorgievski — Wed, 30 Jan 2013 13:28:55 GMT

Hello everyone,

Our company is working with IMX258 cpu with PISA (Platform-Independent Sec Architecture).

We manage to bring our HW to life with latest u-boot v2013.01 && linux 3.2.xx.

We have signed the image, and boot in the security mode.

Now the problem is that we need to export sec-related drivers API into the user space to test device tampering etc...

What I found up to now -- is SAHARA2 Security Hardware Support with CONFIG_MXC_SAHARA flag.

My question is the following: where can I get latest security-related src code? If there is any git repo where I can clone from?

BTW we've got initial USB HAB bootstrap working from linux (command line tool for virgin imx258 bootstrapping). It's good to have some git repo where I can push && commit new sw.

Thank you for your help

Yury

Re: Security and Related Tools - wall comments

YuryGeorgievski — Wed, 30 Jan 2013 13:44:25 GMT

The link you gave is broken...

Can you update it pls?

Re: Security and Related Tools - wall comments

admin — Wed, 30 Jan 2013 16:16:05 GMT

Please see attached.

Regards,

Grant

Re: Security and Related Tools - wall comments

YuryGeorgievski — Wed, 30 Jan 2013 16:21:41 GMT

Thanks!

Re: Security and Related Tools - wall comments

Yuri — Thu, 31 Jan 2013 07:29:47 GMT

As I know the i.MX25 has no SAHARA module.

Re: Security and Related Tools - wall comments

YuryGeorgievski — Thu, 31 Jan 2013 07:39:30 GMT

2 sub-frameworks are located in 'drivers/mxc/security' directory:

a. rng

b. sahara2

Exactly as you said -- imx258 does not have any SAHARA. So rng should be used.

It has an API to the userland and can be found in shw_driver.h (shw_user_request_t).

No DryIce interaction is possible with this ioctl. It should be extended.

Hope someone will find this info useful.

Re: Security and Related Tools - wall comments

YuryGeorgievski — Thu, 31 Jan 2013 09:15:55 GMT

Hello forum!

Not so crowded here, eh?

I start to wonder if anyone at all is using fsl PISA...

But still I'll give it a try...

i.MX PISA security-related SW can be found in http://git.freescale.com/git/

(i personally clone remotes/origin/imx_3.0.35_1.1.0 branch)

All sec-related code is in drivers/mxc/security dir.

4 drivers/modules are involved in fsl SHW framework:

1. shw

2. rng

3. dryice

4. scc

Hope it's useful for somebody.