Files
hardware_interfaces/security/keymint
Andrew Scull 2146152db9 Require proper DICE if StrongBox is present
If a decice provides a StrongBox KeyMint instance then the default IRPC
instance is required to use a proper, non-degenerate DICE chain.

Expose a function to check whether the CSR contains a proper DICE chain
and use that from VTS to implement the test.

Bug: 302204396
Test: atest VtsHalRemotelyProvisionedComponentTargetTest
Change-Id: I90cf070bc2279fc52e0a8e7fd0039d3fdb68c1d7
2024-03-25 18:16:24 +00:00
..
2022-11-10 01:56:49 +00:00

KeyMint HAL

This directory contains the HAL definition for KeyMint. KeyMint provides cryptographic services in a hardware-isolated environment.

Note that the IRemotelyProvisionedComponent HAL, and it's associated types, used to also be defined in this directory. As of Android U, this HAL has been moved to a different directory (../rkp). This move is ABI compatible, as the interfaces have been maintained. The build is split so that the generated code may be built with different options.