• High Assurance Boot (HABv4)
  The HAB feature enables on-chip internal Boot ROM authentication of the initial bootloader (i.e., Secure Boot) with a digital signature, establishing the first trust anchor for code authentication.
  
  
• True Random Number Generator (TRNG)
  The RNGB driver is included and operational in modern Linux kernels. Once loaded, it enables the component within the Linux hw_random framework.
  
  
• Data Co-Processor (DCP)
  The DCP module driver is included and operational in modern Linux kernels. Once loaded, it exposes its algorithms through the Crypto API interface.
  
  
• Secure Non-Volatile Storage (SNVS)
  A device-specific random 256-bit OTPMK key is fused in each SoC at manufacturing time. This key is unreadable and can only be used by the DCP for AES encryption/decryption of user data, through the Secure Non-Volatile Storage (SNVS) companion block.
  
  
• Arm TrustZone
  The i.MX6 SoC family features an Arn TrustZone implementation in its CPU core and internal peripherals.
  
  
• External Cryptographic Co-Processors
  The Microchip ATECC608A and NXP AT71CH feature hardware acceleration for elliptic-curve cryptography, as well as hardware-based key storage. The ATECC608A also features symmetric AES-128-GCM encryption. Both components provide high-endurance monotonic counters, useful for external verification of firmware downgrade/rollback attacks.
• eMMC Replay Protected Memory Blocks (RPMB)
  The eMMC RPMB features replay-protected authenticated access to flash memory partition areas, using a shared secret between the host and the eMMC.

Applications