Hi,
I am working with an i.MX6DL platform. HAB is enabled and the software platform is Linux booting a chain of trust. ROM->SPL->u-boot->FIT image->dm-verity(ext4 on emmc). The kernel version is 4.20. We experience a huge degradation of the read performance from the emmc when dm-verity is enabled. We are measuring speeds that are about ten times longer with dm-verity enabled. We were expecting some performance degradation caused by dm-verity but not that large. Is this reasonable results or is something miss configured?
Can the CAAM module be used in some way to speed up dm-verity or can that only be uses with encrypted file systems? CAAM is now disabled in kernel.
Best regards
Per Örbäck
@per_orback
Hello,
looks like in Your case software implementation of the DM-crypt was used.
App note AN12714 (i.MX Encrypted Storage Using CAAM Secure Keys),
describes demo how to use the DM-crypt with CAAM.
https://www.nxp.com/docs/en/application-note/AN12714.pdf
Regards,
Yuri.