search

toradex / meta-toradex-security

MIT License
4 stars 9 forks source link

Change the CAAM backend to use the kernel Trusted Keys infrastructure #24

Closed sergioprado closed 6 months ago

sergioprado commented 6 months ago

Trusted keys is a feature that makes it possible to have a trusted back-end for generating and managing keys in the kernel key ring service.

https://docs.kernel.org/security/keys/trusted-encrypted.html

Since CAAM is already one of the supported root of trust for key storage, we can leverage it.

Build and runtime tested on Colibri iMX6, Colibri iMX7 and Verdin iMX8MP.