Jetson Orin AGX Disk Encryption

hello elhamriothman,

FYI,
gen_luks_passphrase.py is a tool at host side to generate passphrase for disk encryption when you create encrypted images.
nvluks-srv-app is a tool to run at device side to get passphrase generated from TEE at initrd stage for disk decryption.
they are different tools running for different purposes, but the output passphrase should be aligned or disk decryption will fail.

regrading to this error… TEEC_InvokeCommand failed 0xffff0001 origin 0x4
this command, nvluks-srv-app -c "luks-srv-ecid" -u which can only run at initrd stage to get passphrase,
so, this failure is expected as it avoid to retrieve passphrase on the target, or it might open a door for attackers.

for checking disk encryption functionality, you should make sure…
(1) disk encryption key is passed from flash tool correctly.
(2) disk encryption key inside eks.img is aligned and it can be extracted correctly at TEE side.

1 Like