commit a8fc9ce3f2d225cf3c5f63c88de4d92c858bf4df
author Hasini Gunasinghe <hasinitg@google.com> Wed Aug 11 23:12:18 2021 +0000
committer Hasini Gunasinghe <hasinitg@google.com> Mon Aug 16 21:37:21 2021 +0000
tree 86e8a719c7afedf19d12ddc469f2c8ed3143b8a4
parent 649b305d27b6a1ac0e4c0fc3b878555e3585f618

Set SHA-256 hash of the verified boot key in attestation information.

Currently, bootloader passes the original verified boot key to keymint
when the device is in locked state, which keymint passes to attestation
information.
This CL sets SHA-256 hash of the verified boot key in attestation
information.

Test: Tested by printing the verified boot key in attestation
information from the CTS test, when the device is in locked state.

Bug: 192634248

Change-Id: Ie29ba7e3b890c0e8d65ee2b641980a3529341ee3