AM5728: How to use Cryptodev Driver on a Custom Application

Muhammet Uyar

Part Number: AM5728

Hi,

I am developing an application which will use SRTP protocol. Hence, I need AES encryption. I have seen that AM5728 has a Kernel driver named cryptodev and I want to utilize it in my applicaiton.

First, I have used lsmod command and saw that cryptodev was listed. Then, I have tried "openssl speed -evp aes-128-cbc -engine cryptodev" command but the output says "invalid engine "cryptodev"

I have made sure cryptodev was loaded by calling modprobe -r cryptodev and modprobe cryptodev again. I think OpenSSL is not using CryptoDev.

Second, is there an example application source code that utilizes cryptodev? How can I implement this driver into my project?

I am using "ti-processor-sdk-linux-am57xx-evm-06.03.00.106" on AM5728 EVM. OpenSSL version is 1.1.1b 26 Feb 2019.

Thanks for all the responses.

over 4 years ago

0 Keerthy J over 4 years ago

TI__Guru**** 162490 points

Hi Muhammet,

There are few known issues with openssl. If the intent is to checkout the hardware crypto device then here is an example on omap-aes crypto device
usage: https://pastebin.ubuntu.com/p/yjH8c6qy3v/

Command: insmod /lib/modules/4.19.94-gbe5389fd85/kernel/crypto/tcrypt.ko mode=500 sec=1

[ 680.179511] testing speed of async ecb(aes) (ecb-aes-omap) encryption

The above line indicates that hardware crypto accelerator is being employed.

Best Regards,
Keerthy

0 Muhammet Uyar over 4 years ago in reply to Keerthy J

Intellectual 485 points

Is there a tutorial or guide that you can provide about implementing crypto accelerator in a custom application?

0 Keerthy J over 4 years ago in reply to Muhammet Uyar

TI__Guru**** 162490 points

Hi Muhammet,

This is pretty generic Linux question. https://www.embedded.com/understanding-crypto-performance-in-embedded-systems-part-1/

Quick google gave me that link above.

Best Regards,
Keerthy

0 Muhammet Uyar over 4 years ago in reply to Keerthy J

Intellectual 485 points

I understand the general concept but I wanted something more specific. For instance, there is an example provided under "/ti-processor-sdk-linux-am57xx-evm-06.03.00.106/board-support/extra-drivers/cryptodev-module-1.9/examples." As I understand, you simply write the raw data to a buffer and read the encrypted data from another; which is what I was expecting too. However, I thought there would be a flag indicating if the crypto accelerator has completed its task.

Also. does this example utilize crypto accelerator?

0 Keerthy J over 4 years ago in reply to Muhammet Uyar

TI__Guru**** 162490 points

Hi Muhammet,

Once you boot to Linux prompt.

lsmod | grep omap-aes

If that module is present the crypto framework typically employs that over ARM based crypto.

So yes any application that runs with the above module inserted typically employs Hardware crypto acclerator.

Best Regards,
Keerthy

Processors

Processors forum

AM5728: How to use Cryptodev Driver on a Custom Application