topic Does Openssl API with help of cyrptodev interface using CAAM uses Hardware key for encryption/decryption? in i.MX Processors

Does Openssl API with help of cyrptodev interface using CAAM uses Hardware key for encryption/decryption?

swapnilpendhare — Mon, 02 Nov 2015 12:42:39 GMT

In Linux kernel CAAM can be accessed with the help of /dev/cyrpto interface to encrypt/decrypt data. as mentioned in document i.MX Linux User's Guide (IMXLUG) document section 9. Security.

using following API,

echo "OpenSSL" | openssl enc -aes-256-cbc -engine cryptodev > openssl1.dat

openssl enc -aes-256-cbc -d -in openssal.dat

Does this encryption decryption mechanism involves hardware keys like OTPMK or software keys like ZMK?

if yes, how can we verify it?

if no, Is there any way to use these key (directly /indirectly ) for user level encryption.

Thanks in advance;

Swapnil

IMXLUG

Re: Does Openssl API with help of cyrptodev interface using CAAM uses Hardware key for encryption/decryption?

jamesbone — Wed, 04 Nov 2015 17:19:19 GMT

Hello Swapnil,

Please review the following link:

iMX6 (CAAM, TrustZone) Hardware Security Blocks Use.

Have a great day,
Jaime

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------