OP-TEE with Secure Storage RPMB support on iMx8QM

[matteo-facchinetti]

Hi,

On iMx8QM, I need to use OP-TEE with the Secure Storage RPMB. I have turned on the related config options and it seems work properly.

Now, I want to implement also the tee_otp_get_hw_unique_key() and my strategy is to implements a MKVB module which retrieves the HUK, similar to has already done on iMx6.

https://github.com/OP-TEE/optee_os/pull/3608/commits/df90b3e278b4ee5b0216a7536b7b33fefa8f3e8c

Is this code useful also with the CAAM on  imx8QM?

Idea is to turn on CAAM module porting this series of patches
https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/Enable-CAAM-accelerating-in-OP-TEE-on-i-...
and then use the code mentioned above to retrive the HUK.

Is this feasible? or there is something that I have not considered.

All opinions are welcome!!!

Thanx in advance,

Matteo

[Zhiming_Liu]

We have realize this function in our optee-os, you can see this https://source.codeaurora.org/external/imx/imx-optee-os/tree/core/drivers/crypto/caam/blob/caam_blob...