From 388597703e49ab3494e8a530a6434b6380628212 Mon Sep 17 00:00:00 2001 From: David Drysdale Date: Tue, 9 Jan 2024 15:12:31 +0000 Subject: [PATCH] Secretkeeper: use Ed25519 identity key Test: VtsSecretkeeperTargetTest Change-Id: I27aebb8913c34f043b7ccc7b6e23969377313e1e --- security/secretkeeper/default/Android.bp | 1 + security/secretkeeper/default/src/lib.rs | 8 ++++++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/security/secretkeeper/default/Android.bp b/security/secretkeeper/default/Android.bp index 1d75c74e47..d8ccb63000 100644 --- a/security/secretkeeper/default/Android.bp +++ b/security/secretkeeper/default/Android.bp @@ -34,6 +34,7 @@ rust_library { "libauthgraph_core", "libauthgraph_hal", "libbinder_rs", + "libcoset", "liblog_rust", "libsecretkeeper_core_nostd", "libsecretkeeper_comm_nostd", diff --git a/security/secretkeeper/default/src/lib.rs b/security/secretkeeper/default/src/lib.rs index 412ad45ddb..eb7817c558 100644 --- a/security/secretkeeper/default/src/lib.rs +++ b/security/secretkeeper/default/src/lib.rs @@ -53,8 +53,12 @@ impl LocalTa { let mut crypto_impls = boring::crypto_trait_impls(); let storage_impl = Box::new(store::InMemoryStore::default()); let sk_ta = Rc::new(RefCell::new( - SecretkeeperTa::new(&mut crypto_impls, storage_impl) - .expect("Failed to create local Secretkeeper TA"), + SecretkeeperTa::new( + &mut crypto_impls, + storage_impl, + coset::iana::EllipticCurve::Ed25519, + ) + .expect("Failed to create local Secretkeeper TA"), )); let mut ag_ta = AuthGraphTa::new( AuthGraphParticipant::new(crypto_impls, sk_ta.clone(), MAX_OPENED_SESSIONS)