Using secure memory in crypto APIs

ethanyang — Thu, 01 Dec 2016 14:45:37 GMT

Hi,

In the CAAM sample code, it uses buffer allocated with kzalloc() when doing crypto calculation:

input = kzalloc(block_size, GFP_KERNEL | GFP_DMA);
 memcpy(input, text, block_size);
 sg_init_one(sg, input, block_size);
iv_len = crypto_ablkcipher_ivsize(tfm);
 if (iv_len)
 memset(&iv, 0xff, iv_len);
ablkcipher_request_set_crypt(req, sg, sg, block_size, iv);

Is is possible to use the memory from keystore to do the ciphering?

Something like:

addr_dst = kspriv->slot_get_address(ksdev, unit, slot_dst);
sm_keystore_slot_alloc(ksdev, unit, size, &slot_dst);

We need this when we're doing the key variant calculation.

We want the calculated result is located in the secure memory as it will be used as a cipher key.

Regards,

Ethan

Re: Using secure memory in crypto APIs

Yuri — Fri, 02 Dec 2016 06:31:11 GMT

Hello,

“CAAM implements operations that convert between blob encapsulation
and black-key encapsulation without exposing the key in plaintext.”

But we do not have such example for publishing, sorry.

You may apply to Professional Services:

NXP Professional Services|NXP

Have a great day,

Yuri

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

topic Re: Using secure memory in crypto APIs in i.MX Processors

Using secure memory in crypto APIs

Re: Using secure memory in crypto APIs