| commit | 95084dfd8587992bb384759544678fd0ab5cef8b | [log] [tgz] |
|---|---|---|
| author | Shikha Panwar <shikhapanwar@google.com> | Sat Jul 22 11:47:45 2023 +0000 |
| committer | Shikha Panwar <shikhapanwar@google.com> | Fri Sep 08 14:31:53 2023 +0000 |
| tree | 039ec752a1544f8f270f530c3aebeaef7bffa3ab | |
| parent | c98acd547b04ff52d73fd49d856d29ef7248de43 [diff] |
VmSecret struct: Encapsulate secret mechanisms The current secrets are derived from Dice sealing CDIs , called V1. The new mechanism will will derive secret from Dice Sealing CDIs and Rollback protected secret (using Secretkeeper HAL). This patch create scaffolding code to describe these. This is guarded by feature flag: release_avf_enable_llpvm_changes, which when disabled, pVMs use V1 secrets. Bug: 291216276 Bug: 291213394 Test: atest MicrodroidTests#encryptedStorageIsPersistent Change-Id: I7d610ba97b6f3e45c757546614dc3216e9d0e78f
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
How-Tos: