Tool/software:
OPTEE requires TA_ENC_KEY to enable encryption
According to the code in optee_os, it seems that the decryption key needs to be calculated by DKEK
And according to the description in https://downloads.ti.com/tisci/esd/latest/6_topic_user_guides/dkek_management.html DKEK document,DKEK is hardware only,
Does that mean that I have to find a way to get the DKEK of each device, calculate the TA_ENC_KEY in a certain way, fill it in the script, and then encrypt and compile it?
It doesn't feel easy and reasonable to implement in mass production phase.
I'm not sure if I understand it wrong somewhere.
