| commit | 430feb2a7bdc618c42205eac62c365100d07a2e4 | [log] [tgz] |
|---|---|---|
| author | Catherine Vlasov <cvlasov@google.com> | Mon Nov 18 13:37:45 2024 +0000 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Mon Nov 18 13:37:45 2024 +0000 |
| tree | 1f4723fb5e3a7c2ad783ee4ef34de72015da5a4f | |
| parent | ce452133ebfae7b1392e3d97c6b09a084cb74a66 [diff] | |
| parent | 3ba252f1a2f2ef5d33da52d87561fb57dc114d79 [diff] |
Merge "Specify the use of SHA-256 for the "verifiedBootHash"." into main am: 3ba252f1a2 Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/3359913 Change-Id: I58f1eed6edd8e6dc5ba64014364265b92fae9f73 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/security/keymint/aidl/android/hardware/security/keymint/KeyCreationResult.aidl b/security/keymint/aidl/android/hardware/security/keymint/KeyCreationResult.aidl index 294c205..da8b513 100644 --- a/security/keymint/aidl/android/hardware/security/keymint/KeyCreationResult.aidl +++ b/security/keymint/aidl/android/hardware/security/keymint/KeyCreationResult.aidl
@@ -145,9 +145,9 @@ * verifiedBootKey OCTET_STRING, * deviceLocked BOOLEAN, * verifiedBootState VerifiedBootState, - * # verifiedBootHash must contain 32-byte value that represents the state of all binaries - * # or other components validated by verified boot. Updating any verified binary or - * # component must cause this value to change. + * # verifiedBootHash must contain a SHA-256 digest of all binaries and components validated + * # by Verified Boot. Updating any verified binary or component must cause this value to + * # change. * verifiedBootHash OCTET_STRING, * } *