This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

Can I use Crypto Hardware accelerators (AES, SHA, PKA, RNG...) in u-boot level in am335x.

Hi All,

I gone throught  the am335x datasheet and recent support of crypto hardware accelerators in kernel level. So i understand that AM335x supports for hardware accelerators in cryptography.  Where i can get more information about API or related stuffs?

Can i use the hardware accelerators at boot loader level itself. I want to do aes128 decryption at bootloader ?

 

  • Surendra,


    There is no support written into u-boot for these accelerators and no plans to do so.  I'm not aware of any restriction keeping you from using these if you wanted to port the kernel drivers into u-boot.

    Chase

  • Chase,

    Thanks for your valuable reply and your consistant support :)

    I agree with you. Let suppose I want to use the Openssl library which is part of roofs. We already cross compiled it.(static lib .a)

    Suppose i want to port it to bootloader level. How will be my approch? How i can do that. I just want to use AES128 for decryption purpose only.

     

     

  • Surendra,

    Here we are getting a bit out of my domain of knowledge, but I think rather than porting openssl to the bootloader, you would instead port the driver in the kernel that takes a block of data and encrypts/decrypts it.  Basically port at the lowest level which is the driver rather than trying to port driver -> OCF -> openssl -> your app

    Chase

  • Chase,

    Thats fine. My requirement is only to decrypt the image(like MLO, u-boot, ubifs) with AES128 algorithm. I will encrypt the images using  normal openssl command  on host machine. I need to decrypt those images using AES128 at bootloader level.

    Means i have to use only the function related AES128 decryption. So How i port the specific algorithm drivers. Can you please tell me which driver files from kernel , i need to port in u-boot ....?

    can you show me some poniters? 

  • Surendra,

    In the board-support/linux-xxx/patches kernel directory there is a patch called 0007-am33-Create-driver-for-AES-crypto-module.patch.  This would be a good place to start since it adds the drivers/crypto/omap4-aes.c driver file.  The file is called omap4 because the same IP is used.

    Chase