Add a random salt to microdroid data
The salt is saved along with the instance data and used as the hidden
input to the DICE derivation. This adds a tie between the instance data
and the secret derivation but still relies on microdroid_manager or
administer it correctly.
Bug: 214231981
Test: atest MicrodroidTestApp
Change-Id: I8fd0814a88523e28ce96da21c73ff07f07f1fdfb
diff --git a/microdroid_manager/src/instance.rs b/microdroid_manager/src/instance.rs
index 5a77198..f3bbf16 100644
--- a/microdroid_manager/src/instance.rs
+++ b/microdroid_manager/src/instance.rs
@@ -316,6 +316,7 @@
#[derive(Debug, Serialize, Deserialize, PartialEq)]
pub struct MicrodroidData {
+ pub salt: Vec<u8>, // Should be [u8; 64] but that isn't serializable.
pub apk_data: ApkData,
pub extra_apks_data: Vec<ApkData>,
pub apex_data: Vec<ApexData>,