CMAC generation using CAAM from i.mx8qxp

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

CMAC generation using CAAM from i.mx8qxp

Jump to solution
1,576 Views
kanalgovind
NXP Employee
NXP Employee

Hi,

I am doing performance benchmark of CMAC in user space and kernel space. which is the best app for doing this.

when I search, I found crypto dev for user space purpose. but it is not supporting CMAC, only AES operation is supporting.

can I get a documentation of kernel crypto API for doing CMAC operation in kernel space?

So any one help me to find the app or document for doing this...

 

Regards,

Kanal

0 Kudos
Reply
1 Solution
1,566 Views
marouene_boubakri
NXP Employee
NXP Employee

Hi @kanalgovind,

My understading was that you tried a solution with CAAM black key/blob support.

Is using CAAM secure key mandatory for your use-case ? 

To my knowedge the latest kernel version does not implement CMAC acceleration using CAAM.

Only AES CBC/CTR ... implementations. The driver could be easily extended to support CMAC.

-------

For your use-case I recommand using SECO HSM/SHE service.

There is an Application note describing how to write a simple application.

Also you can find API documentation here [2]

[1] https://www.nxp.com/docs/en/application-note/AN12906.pdf

[2] https://github.com/NXP/imx-seco-libs/tree/master/doc

-------

If having a inplementation for Linux Crypto API is a must we can discuss a timeframe to write a PoC code/demo for your use-case.

 

Regards
Maro

 

View solution in original post

0 Kudos
Reply
1 Reply
1,567 Views
marouene_boubakri
NXP Employee
NXP Employee

Hi @kanalgovind,

My understading was that you tried a solution with CAAM black key/blob support.

Is using CAAM secure key mandatory for your use-case ? 

To my knowedge the latest kernel version does not implement CMAC acceleration using CAAM.

Only AES CBC/CTR ... implementations. The driver could be easily extended to support CMAC.

-------

For your use-case I recommand using SECO HSM/SHE service.

There is an Application note describing how to write a simple application.

Also you can find API documentation here [2]

[1] https://www.nxp.com/docs/en/application-note/AN12906.pdf

[2] https://github.com/NXP/imx-seco-libs/tree/master/doc

-------

If having a inplementation for Linux Crypto API is a must we can discuss a timeframe to write a PoC code/demo for your use-case.

 

Regards
Maro

 

0 Kudos
Reply