AnsweredAssumed Answered

Non Volatile Memory in CAAM (iMX6)

Question asked by satyadamarla on Feb 23, 2017
Latest reply on Feb 23, 2017 by satyadamarla

Hello Everyone,

 

I would like to know if there is any non volatile memory in CAAM for storing keys.

 

My application is as follows:

I would like to save the key for my encrypted rootfs in the processor and access it at boot time and use it to decrypt it through initramfs. I know the keys can be placed in the kernel, initramfs or sdcard (also usb) but I want to know if its possible to save it somewhere in the processor or any hardware modules. I have researched the CAAM Secure Memory but I understood it is used to save stuff on a running system and when the system is restarted then it is lost as it is a volatile memory like RAM. I researched SNVS (Secure Non Volatile Storage) but there is no mention of it being used to save keys from userspace. 

 

  1. Can anyone tell me if there is a possibility in iMX6 to save a key permanently and use it at boot time?
  2. If not, where do you save your encryption keys for your rootfs?

 

Greets,

Satya

Outcomes