Other Parts Discussed in Thread: AM6442
Hi
In our custom product based on AM6442 SoC we want to provide security level to safely store u-boot environment variables in .env file somewhere on mass storage. For now .env file is stored as plain text and this create security hole in our product. We want to prevent to someone replace this file with his u-boot environment variables. The question is:
1. It is possible to encrypt this env file by for example key burned in SoC by efuses or any other way?
2. Moving whole environment to u-boot source code is also not our case because few environment variables need to be modified by RAUC (which we are using to update software). So the key need to be also known to RAUC to decrypt env file.
BR
Jakub
