Actions
Forum Thread Details
  • State Suggested Answer
  • Replies 9 replies
  • Answers 2 answers
  • Subscribers 305 subscribers
  • Views 2272 views
  • Users 0 members are here
Related
See a helpful answer?

Be sure to click 'more' and select 'suggest as answer'!

If you're the thread creator, be sure to click 'more' then 'Verify as Answer'!

Cryptographic App' exploiting the Freescale iMX6 CAAM

Former Member

Hi all,

 

I'm little bit discomforted about this question because it seem to be simple question but I haven't found a correct answer:

- on Frescale iMX6 comunity.

- on Riotboard FAQ.

- Into Fresscale Security Reference Manual for iMX6 [...] Families applications Processors. (IMX6DQ6SDLSRM)

- ...

 

So I ask my question here image .


To sum up :

I've bought an element14 SABRELITE and a RIoTboard . Both board have an Freescale iMX6 processor embedded.

One has an iMX6quad and the other has an iMX6solo.

 

Each board have a Cryptographic Acceleration and Assurance Module (CAAM) which allow to perform fast cryptographic process.

In first time, to test the efficiency of this module I just want to perform a simple AES encryption process.

 

I would like to make a C code program which use the CAAM to perform fast AES computation.

In this code I want :

- Load my plaintext in specific CAAM data register.

- Load a Key in CAAM key register

- Run the cryptographic process

- Read the Ciphered in specific output register.

 

In the documentation that I've read (in particular the IMX6DQ6SDLSRM), I understand they are many Security management registers and security mode

that I have to set up in order to be able to access to some registers addresses.

 

But the documentation is very a Low level documentation and it don't explain "How make a Software application exploiting CAAM".

 

It's for this reason that I ask here.

 

Please has Anyone could help me ?

Has anyone had a code example ?

Do you know right documentation / C library / kernel, OS, setting ... ?

Everything is welcome image

 

 

Fabien.

Parents
  • 0

    Fabien,

         As I am a programmer of many years and have done crypto work for a few of them, This subject is very vast. Here are some of the high level details:

    1. The keys must be created using two large prime numbers to create asymmetrical pairs usually RSA.
    2. One being the private and is store in protected tamper proof storage over the DMA channel.
    3. The other public key is shared with whoever will encrypt the message.
    4. The reverse is needed for two way communications.
    5. A signature is created in a similar  way to authenticate senders. with a exchange.
    6. These are done with PKI interface.
    7. Now plaintext is broken done into blocks and encrypted using AES 128 maybe. There are various flavors depending on usage. ECB is one type. The cipher is added to the RSA of the AES block and sent together.

     

    I could go on, but the explanation would be long. Therefore the documentation to the low level is seldom divulge due to details like this. I would encourage you to read about enigma machine used by German in WWII to get a taste. BTW, I plan on writing code to emulate the real machine used back then in near future, if you wish to learn more. Follow me if you wish.

     

    Cheers,

    Clem

Reply
  • 0

    Fabien,

         As I am a programmer of many years and have done crypto work for a few of them, This subject is very vast. Here are some of the high level details:

    1. The keys must be created using two large prime numbers to create asymmetrical pairs usually RSA.
    2. One being the private and is store in protected tamper proof storage over the DMA channel.
    3. The other public key is shared with whoever will encrypt the message.
    4. The reverse is needed for two way communications.
    5. A signature is created in a similar  way to authenticate senders. with a exchange.
    6. These are done with PKI interface.
    7. Now plaintext is broken done into blocks and encrypted using AES 128 maybe. There are various flavors depending on usage. ECB is one type. The cipher is added to the RSA of the AES block and sent together.

     

    I could go on, but the explanation would be long. Therefore the documentation to the low level is seldom divulge due to details like this. I would encourage you to read about enigma machine used by German in WWII to get a taste. BTW, I plan on writing code to emulate the real machine used back then in near future, if you wish to learn more. Follow me if you wish.

     

    Cheers,

    Clem

Children