Google Git
Sign in
android / trusty / app / keymaster / 5c5a076876cd34f2caed52e3058f3c8cdba21995
commit5c5a076876cd34f2caed52e3058f3c8cdba21995[log] [tgz]
authorMax Bires <jbires@google.com>Tue Mar 22 23:46:55 2022 -0700
committerMax Bires <jbires@google.com>Thu Mar 24 21:32:29 2022 +0000
treea8da7c81d8a1f7157dacd59d6f9c5d02eb4d2c97
parentc0d7c605c740d07307839fed3084c680da0c875c [diff]
Modify KM to integrate with new hwkey_derive API

This change modifies the trusty_keymaster_context classes to integrate
newly generated key blobs into the upgrade hwkey_derive_versioned API on
hwkey. This change will allow KM to transparently upgrade onto newer
versions of the KDF and higher rollback values while still supporting
key blobs generated on older system state.

Test: tbd
Change-Id: I8f12bb1e03f475843e21f63dd6d343a648b5ca12
2 files changed
tree: a8da7c81d8a1f7157dacd59d6f9c5d02eb4d2c97
  1. atap/
  2. device_unittest/
  3. host_unittest/
  4. ipc/
  5. .clang-format
  6. build-config-usertests
  7. keymaster_attributes.pb.c
  8. keymaster_attributes.pb.h
  9. keymaster_attributes.proto
  10. LICENSE
  11. manifest.json
  12. openssl_keymaster_enforcement.cpp
  13. openssl_keymaster_enforcement.h
  14. OWNERS
  15. PREUPLOAD.cfg
  16. rules.mk
  17. secure_storage_manager.cpp
  18. secure_storage_manager.h
  19. trusty_aes_key.cpp
  20. trusty_aes_key.h
  21. trusty_keymaster.cpp
  22. trusty_keymaster.h
  23. trusty_keymaster_context.cpp
  24. trusty_keymaster_context.h
  25. trusty_keymaster_enforcement.cpp
  26. trusty_keymaster_enforcement.h
  27. trusty_keymaster_messages.h
  28. trusty_logger.h
  29. trusty_remote_provisioning_context.cpp
  30. trusty_remote_provisioning_context.h
  31. trusty_secure_deletion_secret_storage.cpp
  32. trusty_secure_deletion_secret_storage.h
  33. usertests-inc.mk