MX8MN: encrypted images do not boot

[MikeEngel]

Hi

we have successfully implemented signing SPL and u-boot image. Now we want to encrypt the SPL and U-boot but the images never boot. I have tried on an open and closed device. On both I have the same behavior. I followed the steps at doc/imx/habv4/guides/mx8m_encrypted_boot.txt and had to figure out that the dek_blob command requires the length of the dek in hex and not in decimal. But even so no boot when images are encrypted.

Are their any documents how to encrypt and sign an SPL and u-boot image?

What could be the reason why the SPL in not decrypted? 

Best regards,

Mike

[Yuri · Accepted solution]

@MikeEngel 
Hello,

  I've sent You some comments directly.

Regards,
Yuri.

[MikeEngel]

I finally found the problems. I had to use 128Bit dek blob encryption to make it work and add a dek blob dummy file to the u-boot image.

Thanks,

--

Mike