From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stefano Babic Date: Mon, 02 Mar 2015 10:47:40 +0100 Subject: [U-Boot] [PATCH v5] imx6: Added DEK blob generator command In-Reply-To: <1425057726-3673-1-git-send-email-Ulises.Cardenas@freescale.com> References: <1425057726-3673-1-git-send-email-Ulises.Cardenas@freescale.com> Message-ID: <54F431BC.1040904@denx.de> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On 27/02/2015 18:22, Ulises.Cardenas at freescale.com wrote: > From: Raul Cardenas > > Freescale's SEC block has built-in Data Encryption > Key(DEK) Blob Protocol which provides a method for > protecting a DEK for non-secure memory storage. > SEC block protects data in a data structure called > a Secret Key Blob, which provides both confidentiality > and integrity protection. > Every time the blob encapsulation is executed, > a AES-256 key is randomly generated to encrypt the DEK. > This key is encrypted with the OTP Secret key > from SoC. The resulting blob consists of the encrypted > AES-256 key, the encrypted DEK, and a 16-bit MAC. > > During decapsulation, the reverse process is performed > to get back the original DEK. A caveat to the blob > decapsulation process, is that the DEK is decrypted > in secure-memory and can only be read by FSL SEC HW. > The DEK is used to decrypt data during encrypted boot. > > Commands added > -------------- > dek_blob - encapsulating DEK as a cryptgraphic blob > > Commands Syntax > --------------- > dek_blob src dst len > > Encapsulate and create blob of a len-bits DEK at > address src and store the result at address dst. > > Signed-off-by: Raul Cardenas > Signed-off-by: Nitin Garg > > Signed-off-by: Ulises Cardenas > > Signed-off-by: Ulises Cardenas-B45798 > --- Applied to u-boot-imx, thanks ! Best regards, Stefano Babic -- ===================================================================== DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de =====================================================================