AnsweredAssumed Answered

Running encrypted image on i.mx6

Question asked by Vadim Lomovtsev on Mar 24, 2014
Latest reply on Mar 25, 2014 by Yuri Muhin

Let's say we have encrypted image which have to be loaded and run at the i.MX6-based board. Image was created and encrypted at some build-server.

According to documentation it is possible to decrypt it using CAAM module but we need to specify keys to decrypt our image in some way.

 

The question is - how we could store keys for image decryption at the board (e.g. decryption could be made by u-boot)?

Is it possible to use OTPMK fuse block for storing keys (which is quite small)? Or there is another solution to handle such scenarios?

 

Also it is said that in order to run HAB authentication we need to burn some values onto OTPMK fuses block, would it be critical if we try to store our secret keys there?

Outcomes