Hi,
On iMx8QM, I need to use OP-TEE with the Secure Storage RPMB. I have turned on the related config options and it seems work properly.
Now, I want to implement also the tee_otp_get_hw_unique_key() and my strategy is to implements a MKVB module which retrieves the HUK, similar to has already done on iMx6.
https://github.com/OP-TEE/optee_os/pull/3608/commits/df90b3e278b4ee5b0216a7536b7b33fefa8f3e8c
Is this code useful also with the CAAM on imx8QM?
Idea is to turn on CAAM module porting this series of patches
https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/Enable-CAAM-accelerating-in-OP-TEE-on-i-...
and then use the code mentioned above to retrive the HUK.
Is this feasible? or there is something that I have not considered.
All opinions are welcome!!!
Thanx in advance,
Matteo
We have realize this function in our optee-os, you can see this https://source.codeaurora.org/external/imx/imx-optee-os/tree/core/drivers/crypto/caam/blob/caam_blob...