Files
hardware_interfaces/security/keymint
David Drysdale 1b9febc5ca Use RAII to ensure KeyMint keyblobs deleted
If some check in a VTS test case fails, the test function may exit early
and not call CheckedDeleteKey(&some_keyblob), thus "leaking" a key blob.

This isn't normally an issue, but if the key blob happens to use a
feature that uses some secure storage (e.g. ROLLBACK_RESISTANCE or
USAGE_COUNT_LIMIT=1) then this may leak some scarse resource.

To avoid the chance of this, use an RAII holder to ensure that
manually-managed keyblobs (i.e. key blobs that are not held in the
key_blob_ member of the base test class) are always deleted.

Bug: 262212842
Test: VtsAidlKeyMintTargetTest
Change-Id: Ie8806095e249870484b9875eb660070607f339a3
2023-06-07 15:46:42 +01:00
..
2022-11-10 01:56:49 +00:00

KeyMint HAL

This directory contains the HAL definition for KeyMint. KeyMint provides cryptographic services in a hardware-isolated environment.

Note that the IRemotelyProvisionedComponent HAL, and it's associated types, used to also be defined in this directory. As of Android U, this HAL has been moved to a different directory (../rkp). This move is ABI compatible, as the interfaces have been maintained. The build is split so that the generated code may be built with different options.