Using the CAAM to generate Black Blobs - can't get /dev/caam-keygen

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Using the CAAM to generate Black Blobs - can't get /dev/caam-keygen

384 Views
dsiev
Contributor I

System:

I am using an i.MX 6 Quad with Linux 5.10.190.

The CAAM has been enabled with the following config:

:/#zcat /proc/config.gz | grep CAAM
CONFIG_CRYPTO_DEV_FSL_CAAM_COMMON=y
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9
# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y

 Problem:

I have read AN12554 and am trying to follow the instructions in AN12714.

Even with the config I showed above, 

cat /proc/crypto | grep -B1 -A2 tk

does not return anything. 

When calling

 

:/# find -name "caam-keygen" 

 

I don't get anything back as well.

Question:

How do I make it so that the /dev/caam-keygen appears and that the cryptographic algorithms get supported? Is dm-crypt a necessity for the caam-keygen to work?

Labels (4)
0 Kudos
2 Replies

363 Views
Harvey021
NXP TechSupport
NXP TechSupport

Hi @dsiev 

We don't have this BSP release - "Linux 5.10.190". 

Suggest to refer to the 10.5 Disk encryption acceleration from Linux user guide (https://www.nxp.com/docs/en/user-guide/IMX_LINUX_USERS_GUIDE.pdf) instead of the AN12714.

 

Regards

Harvey

0 Kudos

356 Views
dsiev
Contributor I

So is there no way to use black keys and blobs without using the NXP kernel, even in newer versions of the mainline linux kernel?

If I understand correctly, in section 10.5 "Disk encryption acceleration" of the Linux user guide by NXP, only red blobs and plain keys can be used without caam-keygen.

0 Kudos