What does the i.MX8QM true random number generator comply with?

[YukioOyama]

Hi everyone,

We are required by our customers to specify a true random number generator.

What does the i.MX8QM true random number generator comply with?

Below is a description of the random number generator in your SE050. As well as this, please tell me what the true random number generator in i.MX8 complies with. And if it is published as documentation, the better for me.

And does this belong to SHE? I was surprised by the fact that the HSE API is not available in the i.MX8QM, as I see in the following case.

https://community.nxp.com/t5/i-MX-Processors/IMX8QM-HSM-SECO-implementation/m-p/1361528/highlight/tr...

Your datasheet describes a lot of features or functions related to security. But that doesn't make sense if you are restricted by the API. We would like a feature from you that we can actually use.

Best Regards,

Yukio Oyama

[Harvey021]

Hi 

You will see more details by checking i.MX8QMSRM. as such below from SRM.

Best regards

Harvey

[YukioOyama]

Hello Harvey-san,

Thanks for your reply.

I will check it out. That's all for the questions. Thank you.

Best Regards,

Yukio Oyama

[Harvey021 · Accepted solution]

Hi @YukioOyama 

TRNG in CAAM is PTG.2 compliant, and our DRBG is DRG.3 compliant, with further software support it will also support DRG.4 and PTG.3.  DRG.4 can be supported by turning on Prediction Resistance for all Generate commands, while PTG.3 can be supported by turning on Prediction Resistance and limiting the output generated to equal the entropy input.

Best regards

Harvey

[YukioOyama]

Hello Harvey-san,

Thanks for your answer, it was very helpful.

Do you have a document with the content of your response? Or is this answer all you have?

Does the current SHE API support DRG.4 and PTG.3? Or is it not yet supported and will be in the future?

Best Regards,

Yukio Oyama