Merge "Sk VTS: Use libdice_policy_builder" into main am: 9ef5917d40

Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2918646

Change-Id: I554af4734a3e600397e4dd82d29b90357a4b52cb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot
2024-01-27 18:32:31 +00:00
committed by Automerger Merge Worker
3 changed files with 7 additions and 6 deletions

View File

@@ -50,7 +50,7 @@ rust_test {
"libbinder_rs",
"libciborium",
"libcoset",
"libdice_policy",
"libdice_policy_builder",
"liblog_rust",
"libsecretkeeper_client",
"libsecretkeeper_comm_nostd",
@@ -72,7 +72,7 @@ rust_binary {
"libbinder_rs",
"libclap",
"libcoset",
"libdice_policy",
"libdice_policy_builder",
"libhex",
"liblog_rust",
"libsecretkeeper_client",

View File

@@ -24,7 +24,8 @@ use authgraph_boringssl::BoringSha256;
use authgraph_core::traits::Sha256;
use clap::{Args, Parser, Subcommand};
use coset::CborSerializable;
use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy, MissingAction};
use dice_policy_builder::{ConstraintSpec, ConstraintType, MissingAction, policy_for_dice_chain};
use secretkeeper_client::{dice::OwnedDiceArtifactsWithExplicitKey, SkSession};
use secretkeeper_comm::data_types::{
error::SecretkeeperError,
@@ -146,7 +147,7 @@ impl SkClient {
MissingAction::Ignore,
),
];
DicePolicy::from_dice_chain(dice, &constraint_spec)
policy_for_dice_chain(dice, &constraint_spec)
.unwrap()
.to_vec()
.context("serialize DICE policy")

View File

@@ -20,7 +20,7 @@ use authgraph_vts_test as ag_vts;
use authgraph_boringssl as boring;
use authgraph_core::key;
use coset::{CborSerializable, CoseEncrypt0};
use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy, MissingAction};
use dice_policy_builder::{ConstraintSpec, ConstraintType, MissingAction, policy_for_dice_chain};
use rdroidtest::{ignore_if, rdroidtest};
use secretkeeper_client::dice::OwnedDiceArtifactsWithExplicitKey;
use secretkeeper_client::SkSession;
@@ -258,7 +258,7 @@ fn sealing_policy(dice: &[u8]) -> Vec<u8> {
),
];
DicePolicy::from_dice_chain(dice, &constraint_spec).unwrap().to_vec().unwrap()
policy_for_dice_chain(dice, &constraint_spec).unwrap().to_vec().unwrap()
}
/// Perform AuthGraph key exchange, returning the session keys and session ID.