TDA4VL-Q1: Use DKEK in MCU domain to encrypt/decrypt data

HI huijin,

huijin lian said:

Is it possible to use KEK or DKEK to do such encrypt/decrypt job in mcu1_0 in MCU domain?

Yes you can use the KEK (Key encryption key) to encrypt the other key,you can get the DKEK using the TISCI_MSG_SA2UL_GET_DKEK  API. 

Ref: https://software-dl.ti.com/tisci/esd/latest/2_tisci_msgs/security/dkek_management.html 

https://software-dl.ti.com/tisci/esd/latest/6_topic_user_guides/dkek_management.html

Regards
Diwakar

Hi Diwakar,

Diwakar Dhyani said:

Yes you can use the KEK (Key encryption key) to encrypt the other key

Can I use KEK by API? since I haven't found any API to utilize KEK, I wanna know which API I can use to access KEK

Diwakar Dhyani said:

you can get the DKEK using the TISCI_MSG_SA2UL_GET_DKEK  API.

Yes, and I found it is Approach 2 - DKEK supplied via TISCI described in TISCI document. I wonder if I choose Approach 1 - DKEK programmed into SA2UL, how can I use DKEK for encryption/decryption

I use PDK 08.06.01.03 and cannot find SA2UL related code, and no idea where to set UES_DKEK flag in SA2UL security context

Do I need to integrate SA2UL driver or something?