Configuration file for memory encryption

Robotics & Edge Computing Jetson Systems Jetson AGX Orin
1

hi all，
I am a beginner using Jetson and I am learning about Memory Encryption. I saw BCT flags (enable_nsdram_encryption and enable_blanket_nsdram_carveout) are set by default to enable DRAM encryption on the T234 Jetson boards

May I ask where is the BCT flags configuration file? I searched the forum and mentioned the MB1 configuration file, but I couldn’t find it. Can you tell me which package to download? I am currently using L4T 35.4.1

It would be even better if the compilation process could be provided.

Looking forward to your reply

3

hello Youke,

here’s developer guide, Memory Encryption.

you should install the Jetpack release image to your local host machine.
and, you shall see the mb1-bct file with following configuraitons,
for example, $OUT/Linux_for_Tegra/bootloader/tegra234-mb1-bct-misc-common.dtsi

     misc {
...
         enable_nsdram_encryption = <1>;
         enable_blanket_nsdram_carveout = <1>;
4

hi jerry，
Thank you for your reply
How can I confirm that the disk encryption was successfully added? How to test?

5

please use this thread, Topic 270779 for following up.

6

hi jerry，
My statement above may be incorrect. What I want to ask is how to confirm successful encryption after memory encryption and how to test it.

7

hello Youke,

you may check bootloader logs.
for example,

[0000.896] I> Task: Program NSDRAM carveout
[0000.901] I> NSDRAM carveout encryption is enabled
[0000.906] I> Program NSDRAM carveout
9

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.