TDA4VM: Using derived KEK on HS devices by TISCI

The documents I refer to are: http://software-dl.ti.com/tisci/esd/latest/6_topic_user_guides/dkek_management.html#  and  http://software-dl.ti.com/tisci/esd/latest/2_tisci_msgs/security/dkek_management.html.

According to my understanding, currently in SDK 7.0, Does the linux kernel only support non-secure queues?. In addition, how are secure and non-secure queues implemented? What is the difference between the secure queue and the non-secure queue in addition to increasing a secure header? 

/* in the ti_sci.h */

#define    TI_SCI_MSG_SA2UL_SET_DKEK 0x9003

struct ti_sci_msg_req_sa2ul_set_dkek {

    #define KDF_LABEL_AND_CONTEXT_LEN_MAX 30

    struct  ti_sci_msg_hdr hdr;

    u8 sa2ul_instance;

    u8 kdf_label_len;

    u8 kdf_context_len;

    u8 kdf_label_and_context[KDF_LABEL_AND_CONTEXT_LEN_MAX];

}__unpacked

struct ti_sci_msg_resp_sa2ul_set_dkek {

    struct  ti_sci_msg_hdr hdr;

}__unpacked

/* in the ti_sci.c */

struct ti_sci_msg_req_sa2ul_set_dkek *req;

struct ti_sci_msg_resp_sa2ul_set_dkek  *resp;

xfer= ti_sci_get_one_xfer(info,TI_SCI_MSG_SA2UL_SET_DKEK,

TI_SCI_FLAG_REQ_ACK_ON_PROCESSED,

sizeof(*req),sizeof(*resp));

req=(struct ti_sci_msg_req_sa2ul_set_dkek *)xfer->xfer_buf;

req->sa2ul_instance=0;

req->kdf_label=10;

req->kdf_context_len=10;

ret=ti_sci_do_xfer(info,xfer);

resp=(struct ti_sci_msg_resp_sa2ul_set_dkek *)xfer->xfer_buf;

if(!ti_sci_is_response_ack(resp))

    ret=-ENODEV;

}