Is encrypting i.MX 8MM EVK without OP-TEE possible?

[kanimozhi_t]

Hi,

    We recently implemented authenticated encryption on our i.MX 8MM EVK board. We followed this community post for enabling the OP-TEE for CAAM DEK blob storage. Though we succeed, it arises the following questions,

1. Is there any feasible option not to use OP-TEE / Trust Zone and still create the DEK blob for image encryption?
2. Are there other features of the i.MX 8M that only can be accessed while in Trust Zone?

    We could get any conclusive answers for the above and a clarification from your side would be appreciated.

Thank you.

[Bio_TICFSL · Accepted solution]

Hello kanimozhi_t,

First answer is no, and second answer is yes, but you can view this appnote for more clear:

https://www.nxp.com/docs/en/application-note/AN12056.pdf.

Regards