topic Re: Can CAAM be used at user level using /dev/crypto in linux? if yes, how to create blob at user level? in i.MX Processors

Can CAAM be used at user level using /dev/crypto in linux? if yes, how to create blob at user level?

swapnilpendhare — Tue, 13 Oct 2015 19:05:33 GMT

There are three queries.

1. Linux has support for /dev/crypto i.e. cryptodev feature with which hardware accelerators can be accessed at user level. Is same thing possible for CAAM?

2. If yes, is there any demo code available to create encapsulated blob? and is it possible to modify keys at CAAM register level.

3. Are all the algorithms supported by CAAM available at user space library like openSSL?

I am using Yocto project Daisy with kernel 3.10.17 on wandboard-quad. I can see CAAM algorithms available in /proc/crypto. please refer attached output.

Re: Can CAAM be used at user level using /dev/crypto in linux? if yes, how to create blob at user level?

Yuri — Wed, 14 Oct 2015 03:26:05 GMT

Hello,

Please refer to section 9 (Security) of “i.MX_Linux_User's_Guide.pdf”.

“The CAAM drivers are accelerated through the CryptoDev interface”.

For blob, please use U-boot.

Have a great day,
Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: Can CAAM be used at user level using /dev/crypto in linux? if yes, how to create blob at user level?

swapnilpendhare — Sun, 18 Oct 2015 14:56:23 GMT

Hi ,

Thanks for the reply. I am looking for develop General blob write/read operation in linux; something like How to Create Blob .

As mentioned in the mentioned link, it can be done through platform SDK only. Is it possible to do same thing from linux user pace.

and second query is,

link Page not found mentioned in post iMX6 (CAAM, TrustZone) Hardware Security Blocks Use. is not accessible. Can you provide more details on this.

Thanks,

Re: Can CAAM be used at user level using /dev/crypto in linux? if yes, how to create blob at user level?

Yuri — Mon, 19 Oct 2015 03:57:18 GMT

Hello,

Please use section 52.5 (API Interface Level) of the "i.MX_Linux_Reference_Manual.pdf".

http://www.freescale.com/webapp/Download?colCode=L3.14.38_6UL_LINUX_DOCS

Please refer to Encrypted Boot explanations in “HABCST_UG.pdf” of the CST.

http://www.freescale.com/products/arm-processors/i.mx-applications-processors-based-on-arm-cores/i.mx-software-and-tools/i.mx-design-tools:IMX_DESIGN

Regards,

Yuri.