Using the CAAM to generate Black Blobs - can't get /dev/caam-keygen

[dsiev]

System:

I am using an i.MX 6 Quad with Linux 5.10.190.

The CAAM has been enabled with the following config:

:/#zcat /proc/config.gz | grep CAAM
CONFIG_CRYPTO_DEV_FSL_CAAM_COMMON=y
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API_DESC=y
CONFIG_CRYPTO_DEV_FSL_CAAM=y
# CONFIG_CRYPTO_DEV_FSL_CAAM_DEBUG is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_JR=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RINGSIZE=9
# CONFIG_CRYPTO_DEV_FSL_CAAM_INTC is not set
CONFIG_CRYPTO_DEV_FSL_CAAM_CRYPTO_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_AHASH_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_PKC_API=y
CONFIG_CRYPTO_DEV_FSL_CAAM_RNG_API=y

 Problem:

I have read AN12554 and am trying to follow the instructions in AN12714.

Even with the config I showed above, 

cat /proc/crypto | grep -B1 -A2 tk

does not return anything. 

When calling

:/# find -name "caam-keygen" 

I don't get anything back as well.

Question:

How do I make it so that the /dev/caam-keygen appears and that the cryptographic algorithms get supported? Is dm-crypt a necessity for the caam-keygen to work?

[Harvey021]

Hi @dsiev 

We don't have this BSP release - "Linux 5.10.190". 

Suggest to refer to the 10.5 Disk encryption acceleration from Linux user guide (https://www.nxp.com/docs/en/user-guide/IMX_LINUX_USERS_GUIDE.pdf) instead of the AN12714.

Regards

Harvey

[dsiev]

So is there no way to use black keys and blobs without using the NXP kernel, even in newer versions of the mainline linux kernel?

If I understand correctly, in section 10.5 "Disk encryption acceleration" of the Linux user guide by NXP, only red blobs and plain keys can be used without caam-keygen.