How to store keys safely and unique in each i.mx6ull chip

[changbaoma]

Hi, NXP support team

    We can use kernel-level Keystor API with CAAM, which can transform a plain key_file to a safe blob_file.
    As you kown i.mx6ull do not have CAAM.

    So how to store keys safely and unique in each i.mx6ull chip?

Best Regards

[Rita_Wang]

You can refer to this document https://www.nxp.com/docs/en/application-note/AN4581.pdf

[changbaoma]

hi, Rita Wang

this doc i have read through without find a solution. i find another doc named

to encrypt keys. it is "CAAM Secure Memory Key Blob Generation", CAAM is needed.

As you know i.mx6ull do not have CAAM, so How can i implement a similar function in i.mx6ull？

Best Regards

[Rita_Wang]

The NXP Linux BSP supports only CAAM based hardware acceleration via CryptoDev interface.

i.MX 6ULL does not have CAAM.

[changbaoma]

you means i.mx6ull do not support uniquely keys crypto?