iMX8 Inline Encryption Engine

[reinerseifried]

How can I configure the IEE to encrypt/decrypt DDR content on the fly on the i.MX8QXP MEK board? I couldn't find any information in the MEK BSP.

What is the best practice? Is this configured in the Device Tree? Or at the U-Boot level via a special iee command? Is there maybe an application note about it?

Any advice is welcome.

[reinerseifried]

Hi Manuel,

I probably expressed myself incorrectly. I did not mean “disk encryption,” but rather DDR in the sense of Double Data Rate Random Access Memory, also known as DRAM. There is even an erratum, ERR010909, for the controller, which literally states: “IEE operation is limited to DRAM, OCRAM and FlexSPI memory space only.” This IEE function is exactly what we want to apply to DRAM.

Best regards,

Reiner

[Manuel_Salas]

Hello, @reinerseifried 

I hope you are doing very well.

We have not Documentation to share, but it should be enough enabling the: 

config BLK_INLINE_ENCRYPTION = y.

Please take a look to the inline-encryption.rst.

Best regards,

Salas.