Files
hardware_interfaces/security/keymint
Andrew Scull a601d07478 Validate DICE chain based on context
The DICE chain in the ProtectedData objects are evaluated against the
specification from v1 and v2 of the HAL whereas the chain in
AuthenticatedMessage objects are evaluated against the specification
from v3.

There are only small differences with v3 aligning to the standards where
there was previously more leniency.

Fix: 262599829
Test: TH
Change-Id: Ied14362b5530485eb6c2302a0ae0f21da9cdb33f
2023-03-13 16:52:40 +00:00
..
2022-11-10 01:56:49 +00:00

KeyMint HAL

This directory contains the HAL definition for KeyMint. KeyMint provides cryptographic services in a hardware-isolated environment.

Note that the IRemotelyProvisionedComponent HAL, and it's associated types, used to also be defined in this directory. As of Android U, this HAL has been moved to a different directory (../rkp). This move is ABI compatible, as the interfaces have been maintained. The build is split so that the generated code may be built with different options.