I would like to know if there is any non volatile memory in CAAM for storing keys.
My application is as follows:
I would like to save the key for my encrypted rootfs in the processor and access it at boot time and use it to decrypt it through initramfs. I know the keys can be placed in the kernel, initramfs or sdcard (also usb) but I want to know if its possible to save it somewhere in the processor or any hardware modules. I have researched the CAAM Secure Memory but I understood it is used to save stuff on a running system and when the system is restarted then it is lost as it is a volatile memory like RAM. I researched SNVS (Secure Non Volatile Storage) but there is no mention of it being used to save keys from userspace.
- Can anyone tell me if there is a possibility in iMX6 to save a key permanently and use it at boot time?
- If not, where do you save your encryption keys for your rootfs?