CMAC generation using CAAM from i.mx8qxp

[kanalgovind]

Hi,

I am doing performance benchmark of CMAC in user space and kernel space. which is the best app for doing this.

when I search, I found crypto dev for user space purpose. but it is not supporting CMAC, only AES operation is supporting.

can I get a documentation of kernel crypto API for doing CMAC operation in kernel space?

So any one help me to find the app or document for doing this...

Regards,

Kanal

[marouene_boubakri · Accepted solution]

Hi @kanalgovind,

My understading was that you tried a solution with CAAM black key/blob support.

Is using CAAM secure key mandatory for your use-case ? 

To my knowedge the latest kernel version does not implement CMAC acceleration using CAAM.

Only AES CBC/CTR ... implementations. The driver could be easily extended to support CMAC.

-------

For your use-case I recommand using SECO HSM/SHE service.

There is an Application note describing how to write a simple application.

Also you can find API documentation here [2]

[1] https://www.nxp.com/docs/en/application-note/AN12906.pdf

[2] https://github.com/NXP/imx-seco-libs/tree/master/doc

-------

If having a inplementation for Linux Crypto API is a must we can discuss a timeframe to write a PoC code/demo for your use-case.

Regards
Maro