tree 12fa0f92ced4e61ab679ade32cefce8017519a70
parent facc2b82cfd8935532a591a5bf09218e6f2a754f
author Alice Wang <aliceywang@google.com> 1696237813 +0000
committer Alice Wang <aliceywang@google.com> 1696592916 +0000

[rkp] Encrypt/decrypt the private key with AES-256-GCM

This cl implements the private key encryption and decryption
with AES-256-GCM.
The KEK is derived from the sealing CDI with a random salt
generated with TRNG.

The test is added to the busy town config at cl/570947834.

Bug: 279425980
Test: atest rialto_test
Test: atest libservice_vm_requests.test
Change-Id: I214ee37c64cb8508083b02376c8a398ca6049e3b