imx8mm HAB events encrypted storage using CAAM

[ervosfo]

Hi I have secure boot hab and encrypted storage with CAAM running on a imx8mm board.
As described in application note AN12714. 

Is it normal that CAAM also decrypts data with black key blob if hab events have previously occurred during boot due to loading/verifying unsigned code?
I would have expected the CAAM engine to stop working and become unavailable as soon as a HAB event occurred.

[ervosfo]

ok, thank you for the confirmation

[Harvey021 · Accepted solution]

That is normal. HAB event doesn't affect CAAM, except for CAAM Engine fail such case.

Regards

Harvey