iMx.95 FRDM post quantum algorithms support

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

iMx.95 FRDM post quantum algorithms support

508 Views
davidecryptalabs
Contributor I

I have an iMX.95 FRDM development board and I would like to use post quantum algorithm hardware acceleration.

I've tried this command:

pkcs11-tool --module /usr/lib/libsmw_pkcs11.so.5 --list-mechanism

but the ML-KEM or ML_DSA ar not listed.

I'#m currently building the imx image with yocto.

How can I enable post quantum algorithm support?

0 Kudos
Reply
2 Replies

426 Views
Oswalag
NXP TechSupport
NXP TechSupport

Hello,

You don't simply "enable PQC" with a Linux kernel option.

The i.MX 95 capability is integrated into the EdgeLock Secure Enclave / hardware root of trust.

The i.MX 95 Advanced Profile Secure Enclave enables a post-quantum hardware root of trust and supports hybrid ML-DSA + ECDSA for NXP-signed Secure Enclave firmware.

There is an i.MX 95 with SPSDK and ML-DSA hybrid secure boot implementation, which is much more useful than the general PQC documentation:

i.MX 95 Secure Boot with SPSDK

And the general NXP PQC architecture is here:

NXP Post-Quantum Cryptography

0 Kudos
Reply

410 Views
davidecryptalabs
Contributor I

Thanks for the links!
I know it's not that simple, but I would like to use the PQC hardware acceleration from a Linux user space application, and I was wondering what's the best way to achieve that. I'm developing an application where the two parties involved use ML-DSA to authenticate themselves and ML-KEM to get the shared secret keys for an encrypted communication session. 
I was reading this: RM00284: EdgeLock Enclave Hardware Security Module API  and my question is: Can I use the API from a LInux user application that runs on the application domain? Or is that available only from the Low-Power Real Time Domain?

0 Kudos
Reply