Test CannotCreateEarlyBootKeys only if metadata encryption is on am: fceb7e53a2
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/1518363
Change-Id: I80a928d3db5c419293228bc22d6edf2613a5a9e2
diff --git a/keymaster/4.1/vts/functional/EarlyBootKeyTest.cpp b/keymaster/4.1/vts/functional/EarlyBootKeyTest.cpp
index a26c688..6d44150 100644
--- a/keymaster/4.1/vts/functional/EarlyBootKeyTest.cpp
+++ b/keymaster/4.1/vts/functional/EarlyBootKeyTest.cpp
@@ -18,6 +18,8 @@
#include <keymasterV4_1/authorization_set.h>
+#include <android-base/properties.h>
+
namespace android::hardware::keymaster::V4_1::test {
using std::string;
@@ -30,6 +32,8 @@
// creates/uses early boot keys during boot. It should fail to boot if the early boot key usage
// fails.
TEST_P(EarlyBootKeyTest, CannotCreateEarlyBootKeys) {
+ // In R, this works only on devices with metadata encryption.
+ if (!android::base::GetBoolProperty("ro.crypto.metadata.enabled", false)) return;
auto [aesKeyData, hmacKeyData, rsaKeyData, ecdsaKeyData] =
CreateTestKeys(TAG_EARLY_BOOT_ONLY, ErrorCode::EARLY_BOOT_ENDED);