On 27/02/2015 18:22, ulises.carde...@freescale.com wrote: > From: Raul Cardenas <ulises.carde...@freescale.com> > > Freescale's SEC block has built-in Data Encryption > Key(DEK) Blob Protocol which provides a method for > protecting a DEK for non-secure memory storage. > SEC block protects data in a data structure called > a Secret Key Blob, which provides both confidentiality > and integrity protection. > Every time the blob encapsulation is executed, > a AES-256 key is randomly generated to encrypt the DEK. > This key is encrypted with the OTP Secret key > from SoC. The resulting blob consists of the encrypted > AES-256 key, the encrypted DEK, and a 16-bit MAC. > > During decapsulation, the reverse process is performed > to get back the original DEK. A caveat to the blob > decapsulation process, is that the DEK is decrypted > in secure-memory and can only be read by FSL SEC HW. > The DEK is used to decrypt data during encrypted boot. > > Commands added > -------------- > dek_blob - encapsulating DEK as a cryptgraphic blob > > Commands Syntax > --------------- > dek_blob src dst len > > Encapsulate and create blob of a len-bits DEK at > address src and store the result at address dst. > > Signed-off-by: Raul Cardenas <ulises.carde...@freescale.com> > Signed-off-by: Nitin Garg <nitin.g...@freescale.com> > > Signed-off-by: Ulises Cardenas <ulises.carde...@freescale.com> > > Signed-off-by: Ulises Cardenas-B45798 <ulises.carde...@freescale.com> > ---
Applied to u-boot-imx, thanks ! Best regards, Stefano Babic -- ===================================================================== DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sba...@denx.de ===================================================================== _______________________________________________ U-Boot mailing list U-Boot@lists.denx.de http://lists.denx.de/mailman/listinfo/u-boot
