keys/trusted-keys/trusted_dcp.c

17 #include <soc/fsl/dcp.h>
23  * DOC: dcp blob format
25  * The Data Co-Processor (DCP) provides hardware-bound AES keys using its
27  * To make DCP hardware encryption keys usable as trust source, we define
31  * Whenever a new trusted key using DCP is generated, we generate a random 128-bit
35  * The BEK itself is encrypted using the hardware-bound key using the DCP's AES
42  * struct dcp_blob_fmt - DCP BLOB format.
47  *            AES-128-ECB mode by DCP.
53  * The total size of a DCP BLOB is sizeof(struct dcp_blob_fmt) + @payload_len +
91 	tfm = crypto_alloc_skcipher("ecb-paes-dcp", CRYPTO_ALG_INTERNAL,  in do_dcp_crypto()
244 		pr_err("DCP blob has bad version: %i, expected %i\n",  in trusted_dcp_unseal()
253 		pr_err("DCP blob has bad length: %i != %i\n", blen,  in trusted_dcp_unseal()
268 		pr_err("Unwrap of DCP payload failed: %i\n", ret);  in trusted_dcp_unseal()
283 	 * this ciphertext in case the DCP test key is used.  in test_for_zero_key()
319 		pr_info("Using DCP OTP key\n");  in trusted_dcp_init()