AnsweredAssumed Answered

Encrypt / Decrypt data from uboot using CAAM

Question asked by Jose Diaz de Grenu de Pedro on May 12, 2016
Latest reply on Aug 22, 2017 by tera teller

I would like to use the CAAM on the i.MX6Q to encrypt/decrypt data from uboot, using any available encryption protocol (I understand you can use AES 128-bit, 192-bit or 256-bit) and the OTPMK as key. That is, like the dek_blob is done. How can that be done?

 

I have seen some constructor for job descriptors available in drivers/crypto/fsl/jobdesc.c. I assume it would be necessary to create new job descriptor constructors for AES encryption and AES decryption which would use a src pointer, dst pointer and uint32_t data length.

 

However ensambling a job descriptor seems complicated and error prone. Is there any examples about how to do that?

Outcomes