commit 4f4f5eb3e009260544b939648a6bf7a41e262bdc
author Pierre-Clément Tosi <ptosi@google.com> Thu Dec 08 14:31:42 2022 +0000
committer Pierre-Clément Tosi <ptosi@google.com> Thu Jan 12 10:48:34 2023 +0000
tree 0f4ddd1715c58f33fc8308056c3be8f613326451
parent 02adf07059ef9ef16c6fe1c99848ee156c78f5a1

pvmfw: Perform DICE derivation

Integrate DICE derivation into pvmfw and fail if the operation fails.

Note that we still need to get the salt ("hidden" DICE input) from the
instance.img or TRNG and pass the result to the next stage.

Bug: 256827715
Test: atest MicrodroidHostTests
Change-Id: Ibebaf526fd6055b9d05ce6017b560fb8814471e5

pvmfw/src/entry.rs

diff --git a/pvmfw/src/entry.rs b/pvmfw/src/entry.rs
index 1b35c79..52e7a22 100644
--- a/pvmfw/src/entry.rs
+++ b/pvmfw/src/entry.rs
@@ -48,6 +48,8 @@
     InvalidRamdisk,
     /// Failed to verify the payload.
     PayloadVerificationError,
+    /// DICE layering process failed.
+    SecretDerivationError,
 }
 
 main!(start);