How to encrypt the Linux kernel image and have uboot decrypt and authenticate it before loading iMX8

[yanghongsing1]

I would like to encrypt the Linux kernel image and have uboot to decrypt and authenticate it before loading in in the same way as encrypt and sign a bootloader image for imx8mm. I can only find the step-by-step procedure of "authenticate the Linux kernel image". Is there any similar document to describe how to encrypt the Linux kernel image and have uboot to decrypt and authenticate it before loading in imx8mm? Thanks...

[Yuri]

@yanghongsing1 
Hello,

  customers can use

https://source.codeaurora.org/external/imx/uboot-imx/tree/doc/imx/habv4/guides/mx8m_encrypted_boot.t...

https://source.codeaurora.org/external/imx/uboot-imx/tree/doc/imx/habv4/guides?h=imx_v2020.04_5.4.70...

Regards,
Yuri.

[craigmcqueenir]

That describes how to have an encrypted U-Boot that is decrypted and authenticated by the HAB. But it doesn't describe how to have an encrypted Linux kernel image.