Google Git
Sign in
android / platform / external / nos / host / android / 1e98103db981667e64493bd6d5a458dc31d9078c
commit1e98103db981667e64493bd6d5a458dc31d9078c[log] [tgz]
authornagendra modadugu <ngm@google.com>Thu Jun 28 18:03:03 2018 -0700
committernagendra modadugu <ngm@google.com>Thu Jun 28 19:20:15 2018 -0700
treefb7f103a5f62a72b2f2785605b1799f85e692ea7
parent273e3e168b8880b7e90136666b0e55c7795e764a [diff]
parent20fc103aab5a2c3fd1835b7ddc4591e18dcbb8cb [diff]
Merge remote-tracking branch 'goog/upstream-master' into ngm-nos-merge-upstream

* goog/upstream-master:
  Fix verification token translation
  [keymaster] Fix race condition at bootup
  keymaster: remove lazy provisioning

Bug: 110964870
Test: pending

Change-Id: I030a6f7896bd65346e82eaffb7a493b51fb9449c
tree: fb7f103a5f62a72b2f2785605b1799f85e692ea7
  1. citadel/
  2. hals/
  3. manual_tests/
  4. Android.bp
  5. LICENSE
  6. METADATA
  7. MODULE_LICENSE_APACHE2
  8. NOTICE
  9. README.md
README.md

Android components for Nugget

Android communicates with Nugget apps in order to implement security related HALs. Currently, those HALs are Keymaster, Weaver and OemLock.

Services

Apps that define a protobuf service will have an app interface class autogenerated. These classes will wrap a NuggetClient. The generator can be found in the generator directory.

Asynchronous communication

Work in progress.

Currently, everything is synchronous and just exposes the call_application() function from the Nugget transport API. In future, asynchronous calls may be desired. Support for this could be added in:

  • Nugget transport API
  • NuggetClient on top of call_application()
  • Generated services

citadel

This directory contains the components to support Citadel connected to Android.