rpi-fw-crypto support for Raspberry Pi 4 Model B

[embetrix]

wondering if rpi-fw-crypto is supposed to be supported on Raspberry Pi 4 Model B ? (No hints here):

Hardware revision:

root@raspberrypi4-64:~# cat /proc/device-tree/model
Raspberry Pi 4 Model B Rev 1.5

Updated EEPROM with latest firmware:

root@raspberrypi4-64:~# vcgencmd bootloader_version
2026/01/09 16:12:13
version d76c460359ec31b2fadf3b48e44599673095326f (release)
timestamp 1767975133
update-time 1768576762
capabilities 0x0000007f

Try generate EC Key:

root@raspberrypi4-64:~# rpi-fw-crypto genkey --key-id 1 --alg ec
ioctl_mbox_property failed: -1
ioctl_mbox_property failed: -1
Failed to generate key: Success
ioctl_mbox_property failed: -1

root@raspberrypi4-64:~# dmesg | tail -3
[  505.565036] raspberrypi-firmware soc:firmware: Request 0x00030095 returned status 0x80000001
[  505.573840] raspberrypi-firmware soc:firmware: Request 0x0003008e returned status 0x80000001
[  505.582533] raspberrypi-firmware soc:firmware: Request 0x0003008e returned status 0x80000001

This workflow works perfectly with raspberrypi5.

[timg236]

rpi-fw-crypto is implemented in start4.elf on Pi4. You need the latest version which might be the rpi-update release.

[embetrix]

@timg236 updated firmware to latest release

I get now a different error:

root@raspberrypi4-64:~# rpi-fw-crypto genkey --key-id 1 --alg ec
ioctl_mbox_property failed: -1
Failed to generate key: Key not set (all zeros)
Last crypto error: 6 (Key not set (all zeros))

root@raspberrypi4-64:~# dmesg | grep firm
[    0.032363] raspberrypi-firmware soc:firmware: Attached to firmware from 2025-08-20T17:02:31, variant start
[    0.036371] raspberrypi-firmware soc:firmware: Firmware hash is cd866525580337c0aee4b25880e1f5f9f674fb24
[    3.157332] raspberrypi-firmware soc:firmware: Request 0x00030093 returned status 0x80000001
[  184.547344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  216.210383] raspberrypi-firmware soc:firmware: Request 0x00030095 returned status 0x80000001
[  228.573519] raspberrypi-firmware soc:firmware: Request 0x00030095 returned status 0x80000001
[  350.747139] raspberrypi-firmware soc:firmware: Request 0x00030095 returned status 0x80000001
[  476.724736] raspberrypi-firmware soc:firmware: Request 0x00030095 returned status 0x80000001
[  533.457082] raspberrypi-firmware soc:firmware: Request 0x00030093 returned status 0x80000001

root@raspberrypi4-64:~# uname -ar
Linux raspberrypi4-64 6.6.63-v8 #1 SMP PREEMPT Fri Dec  6 10:10:05 UTC 2024 aarch64 GNU/Linux