encrypt and decrpt kernel Image, dtb, intramfs

[manjunath_bentu]

Hello everybody,

   I'm looking for a solution to my problem, I'm working on imx8M and I have a secure u-boot that is capable to authenticate the signature of the kernel.

   I want to know is there a way to encrypt kernel Image , dtb and intramfs (all in boot partition) and decrypt all of them via u-boot.?

   Please help me with this or show a path how should I proceed?    

   Thank you in advance

[manjunath_bentu]

Hi joanxie‌,

Yes the email is correct. Thank you once again for your help.

I did not receive any documents from you. 

If not then you can send the docs to alternative email address : "manjubb2@gmail.com" If this is ok for you.

Thank you once again and sorry

[joanxie]

I have uploaded, you can login the case and download it

[manjunath_bentu]

Hi Joan Xie, I received your documents. The document is about signed uboot , But I am looking for encryption and decryption of uboot for imx8m.

In the documents there is no mention of DEK.bin file for decryption

Please send these related documents for my case.

Looking forward for your reply.

[manjunath_bentu]

Hi joanxie

I have uploaded the NDA in doc store.

Please provide me necessary documentation for authenticatioon process

Thank you :smileyhappy:

[joanxie]

is this your mail address manjunath.bentur@erweka.com?? I have created a new case to you and mailed to you many times, but didn't get any feedback from you, pls let me know it if you receive any mail? if yes pls reply to me directly

[manjunath_bentu]

Hi Joan Xie,

I have uploaded the NDA in doc store. I am not able to send the mail to you, Could you please share your email address, so that I can send the NDA to you.

Thank you

[manjunath_bentu]

Thank you, I just forward the NDA to admin@community.nxp.com

[joanxie]

I have mailed to you, pls reply to me directly in the case

[joanxie]

this is about secure boot which is under NDA, we couldn't share these in the public community, if you have NDA, pls let me know it, I can send them to you directly

[manjunath_bentu]

Thank you Joan Xie for your reply. I do not have NDA as such. How can sign one? 

I see there is documentation for imx6 for encryption of uboot, but there is no document or procedure for IMX8 uboot encryption. Does it mean IMX8 also uses same logic as IMX6 for encryption of u-boot?

Ofcourse there is documentation for secure boot for both IMX6 and IMX8 , this is what confuses me.

Please share some thought on this :smileyhappy: 

[joanxie]

I have create a NDA request for you, if you get NDA, pls forward to me, any update you can mail to me in the case

[manjunath_bentu]

Hallo Joan Xie,

I forwarded the NDA , Please could you confirm it whether you recived it?