Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Kernel version for AN12714 : i.MX Encrypted Storage Using CAAM Secure Keys

Jump to solution
3,428 Views
PierreB
Contributor II

Hi,

We want to use the CAAM Secure keys on i.MX8 MMd.

I am following the Application Note AN12714 rev2 : i.MX Encrypted Storage Using CAAM Secure Keys.

Every step is succesful until I am stuck at step 3.2.4 page 6,

When entering :

caam-keygen create randomkeyCCM ccm -s 24

we get the following error :

Unable to open device /dev/caam-keygen


My understanding is that /dev/caam-keygen is not available on the kernel version we use (4.14.98). Is that correct ?

Is there a way, a workarround to add /dev/caam-keygen to our build ?


The application note uses the kernel version 5.4.47 (page 5, step 9).

What are the kernel versions that integrates /dev/caam-keygen ?

Thanks,

Pierre

0 Kudos
1 Solution
3,413 Views
Yuri
NXP Employee
NXP Employee

@PierreB
Hello,

   Please try the previous AN12714 release (attached).

Regards,
Yuri.

 

 

View solution in original post

4 Replies
2,952 Views
dpatil
Contributor II

I am facing same issue.

and I also try previous release but getting following error:

add_key: No such device

is anything missing

Kernel version:5.4.85

Output of zcat /proc/config.gz | grep -i caam

is as following:

 

# CONFIG_CRYPTO_DEV_FSL_CAAM_DMA is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_COMMON=y
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SECVIO=y
CONFIG_CRYPTO_DEV_FSL_CAAM=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9
# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_TK_API=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_TEST is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_SM=y
CONFIG_CRYPTO_DEV_FSL_CAAM_SM_SLOTSIZE=7
CONFIG_CRYPTO_DEV_FSL_CAAM_SM_TEST=m

0 Kudos
3,392 Views
PierreB
Contributor II

Thank you Yuri.

I think this is what i need. I will try it immediately.

regards,

Pierre

0 Kudos
3,414 Views
Yuri
NXP Employee
NXP Employee

@PierreB
Hello,

   Please try the previous AN12714 release (attached).

Regards,
Yuri.

 

 

3,367 Views
PierreB
Contributor II

Following the rev1 of the application note worked.

Thanks a lot Yuri.

 

0 Kudos