中文 EN

4.4.8. Information Security Development Guide

• 4.4.8.1. Introduction to security hardware
  • Overview
    • Introduction
    • Security Algorithms
  • Hardware Security Driver
    • Driver Source Code
    • Enabling Hardware Security
      • Kernel Configuration
      • DTS Configuration
      • Loading the Driver
  • Notes
• 4.4.8.2. FDE Full disk encryption
  • Overview
    • Introduction
    • FDE Principle
    • Terminology
  • FDE Tools
    • cryptsetup
      • Working Principle
    • dm-crypt
      • Working Principle
  • X5 FDE User Password Management
  • X5 FDE Usage
    • System Partition Encryption
      • Solution Principle
      • Usage Method
        • Change the system partition verification method to crypt
        • Create system FDE image
        • User root key
        • Build and Boot
    • User Partition Encryption: key-hobot Solution
      • Add New Partition
      • Add FDE Configuration in hb-crypttab
      • Create Mount Point Directory in Root Filesystem
      • Build and Boot
    • User Partition Encryption: key-file Solution
      • Solution Principle
      • Usage Method
        • 1. Add Partition and Build Script
        • 2. Encryption/Decryption Key File
        • 3. Add Encryption Partition Build Script
        • 4. Source Files for User Encrypted Partition
        • 5. Build
      • Boot Verification
• 4.4.8.3. FBE File encryption
  • FBE File Encryption
    • Overview
    • X5-FBE Usage
      • Using External Key
      • Using X5 Derived Key
• 4.4.8.4. Safe start
  • X5 Secure Boot Overview
  • Uboot & BL2 CFG Verification
    • Process Overview
      • PC-side Signing Process
      • Board-side Verification Process
    • Key Management
      • Generation and Programming of Uboot and BL2 CFG Keys
  • Kernel & Rootfs Verification
    • Overview of AVB and dm-verity
    • AVB and dm-verity Verification Process
    • Key Management
      • Generation and Programming of User Keys
  • Software Version Anti-Rollback
    • Introduction
    • Enabling Anti-Rollback Function
    • Setting and Updating Anti-Rollback Version
    • Limitations
  • Enabling Secure Boot
    • Configuring eFuse
    • Checking if Secure Boot is Enabled
    • Configuring System Image
    • Enabling dm-verity on OEM Partition
      • Add OEM Partition in Partition Table
      • Add Mount Point
      • Configure Auto-mount
      • Packaging OEM Image
      • Notes on oem Partition Upgrade
  • Verifying Secure Boot
• 4.4.8.5. boot encrypt
  • boot encryption introduction
  • boot encryption usage
    • boot encryption principle
    • Enabling boot encryption
  • boot key storage
    • boot encryption key storage
    • U-Boot retrieving the key
      • Method 1: Retrieve via DTS
        • Usage
      • Method 2: Retrieve via RPMB
        • RPMB Introduction
        • Usage
• 4.4.8.6. TEE
  • ARM TrustZone
    • System Architecture
    • CPU Privilege Levels
    • Glossary
  • About X5 TEE
    • Implementation Mechanism
    • Firmware Acquisition
    • Version Information
      • BL31
      • OP-TEE
  • TA Development
    • Overview
    • Building TA
    • TA Signing and Encryption
      • TA Signing
        • Generate a New Private Key File
        • Replace Public Key in OP-TEE OS
        • Compile TA
      • TA Encryption
        • Enable TA Encryption
        • Modify Key File
        • Compile TA
        • Notes
    • Building TA Separately
    • Deploying TA
• 4.4.8.7. eFuse Burning
  • X5 eFuse Introduction
    • Overview
    • X5 eFuse Features
  • BL2 eFuse Programming
    • eFuse Configuration File
    • eFuse Power Control and Programming Status
      • eFuse Programming Status
      • eFuse Power Control
      • Usage Example
  • U-Boot Read/Write eFuse
    • Read eFuse
      • Read Specific eFuse Bank Value
    • Write eFuse
    • Notes
  • Linux Read/Write eFuse
    • API Reference
    • Data Structures
      • efuse_type
      • efuse_info
    • Interface Descriptions
      • drobot_efuse_read
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
      • drobot_efuse_write
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
  • Notes
    • Procedure for Enabling Secure Boot
    • Forcibly Enabling Debug Port
  • X5 Customer Root RSA Key Hash Burning and Usage
    • Introduction
    • Replacement of Customer Root RSA Private Key
    • Burning Customer Root Public Key Hash
      • BL2_CFG Burning
      • hbre libefuse Burning
        • Example of Official Interface Usage
        • Debug Interface Example
      • Dump eFuse Burn Status
    • Image Compilation
    • Notes
• 4.4.8.8. secure storage
  • X5 Secure Storage Introduction
  • KEY Management
    • File Encryption/Decryption Key Management
      • SSK (Secure Storage Key)
      • TSK (Trusted Application Storage Key)
      • FEK (File Encryption Key)
    • RPMB KEY Management
  • Secure Storage Operation Interfaces
    • Basic Information
    • Return Value Description
    • API Reference
    • Interface Descriptions
      • drobot_st_file_load
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_st_file_store
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_force_rpmb_key_ready
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_is_st_file_exist
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_st_file_delete
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_st_file_rename
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_get_device_unlock
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
      • drobot_set_device_unlock
        • 【Function Declaration】
        • 【Function Description】
        • 【Parameter Description】
        • 【Return Value】
        • 【Notes】
        • 【Compatibility】
        • 【Example Code】
  • Secure Storage Operation Commands
    • Basic Information
    • Usage