Posts by FaBier

  • i.MX6 CAAM - keyblob decryption fails after kernel upgrade

    Hi,


    We are currently upgrading a custom board from Kernel 4.1 to 5.15.


    We are using NXP's CAAM driver to securely store a keyblob.


    After updating on a security-enabled device, decryption fails.


    Adding some debug prints in sm_store.c yields that the job returns with JRSTA_CCBERR_ERRID_ICVCHKL


    If I print the status instead of just returning -EBADMSG, I get the following output:


    Code
    1. [ 30.153764] caam_jr 2101000.jr: 2000081a: CCB: desc idx 8: AES: ICV check failed.
    2. [ 30.161259] caam_jr 2101000.jr: 2000081a: CCB: desc idx 8: AES: ICV check failed.


    The raw return value is 0x2000 081A, in case there is more information there.


    Any help is highly welcome. I can of course provide more information if needed.




    Thanks in advance and best regards


    FaBier