IMX6ULLSRM.pdf, page 162, 5.3.2.2 AES OTP key
The DCP receives a 64-bit UNIQUE KEY and a 128-bit CRYPTO KEY.
...
To use the OTP key, the descriptor packet must set the OTP_KEY field in the Control1
register (see Control1 field).
IMX6ULLSRM.pdf, page 165, 5.3.4 One-Time Programmable (OTP) key
The OTP key (CRYPTO KEY) can be selected using the DCP_Control1[OTP_KEY] bit
in the control field of the packet descriptor or by using the key select 0xFF in the CTRL1
field of the descriptor. The DCP also supports a second hardware key called the UNIQUE
KEY which is generated from the OTP KEY and the key modifier bits from other OTP
fuse fields. This key is unique to the device and can be used to encrypt the private data
stored on the NAND. This key can be selected by writing 0xFE to the KEY_SELECT
field in the CTRL1 packet data.
Key | DCP_CONTROL1[OTP_KEY] | KEY_SELECT |
---|---|---|
CRYPTO_KEY | ||
UNIQUE_KEY |
Hi @Yuri
I'm also interested in i.MX6ULL keys details as detailed in this post.
Also I would like to know their relation to what is described in "7.1 SNVS Overview"
At the DCP level which key is used for crypto_key if the CPU boots in secure mode or non-secure
Thanks
Hello,
I've sent You some comments directly.
Regards,
Yuri.
Dear Yuri Muhin,please also sent me your comments directly