Hi All,
The Yocto build has a /dev/caam_kb when CAAM is enabled. Does anyone know or refer me to some documentation on how to generate a key blob(using OTPMK?) using this ioctl device interface?
Is there some examples or documentation? How can CAAM be called to make a key blob using OTPMK?
Thanks,
Tera
Dear All,
I chanced upon the dek_blob tool in connection with HABv4.
So from what I read, using this tool one can generate use a DEK (encryption key) and encrypt data. In case of HAB, using this tool, we can encrypt our uboot image, isn't it?
Here is how the command can be used:
dek_blob <DEK address> <Output Address> <Key Size in Bits>
Here what is the DEK Address? Also, does this command per default use the OTPMK , i.e the master key bound to each chip burned in silicon?
Please throw light.
Thanks a lot.
you need to use the signed U-boot. pls refer to the document as below: