commit	16fb8555e8a8e39a7339f7a29f2e3c4aea918d7d	[log] [tgz]
author	Alan Stokes <alanstokes@google.com>	Thu Feb 10 15:07:27 2022 +0000
committer	Alan Stokes <alanstokes@google.com>	Thu Feb 17 16:58:32 2022 +0000
tree	bb85000ec0f7df1fe64b933a211c77952ae82240
parent	dcff1e7e2330ec7f83ad5e620aaa8c41d0663499 [diff]

Rewrite key management & signing

Extend compos_helper to support signing, use it from CompOS.

Expose the public key from the VM. Rename compos_verify_key to
compos_verify and get it to verify the signature against the current
instance's public key.

Also move DICE access to compos_key_main. There's no use having it in
the library - neither the tests nor compos_verify can use it - and it
complicates the build rules.

There's a lot more that can be deleted, but I'll do that in a
follow-up; this is big enough already.

Bug: 218494522
Test: atest CompOsSigningHostTest CompOsDenialHostTest
Change-Id: I2d71f68a595d5ddadb2e7b16937fa6855f5db0ab

compos/Android.bp[diff]
compos/aidl/com/android/compos/ICompOsService.aidl[diff]
compos/apex/Android.bp[diff]
compos/common/compos_client.rs[diff]
compos/common/odrefresh.rs[diff]
compos/common/timeouts.rs[diff]
compos/compos_key_helper/Android.bp[diff]
compos/compos_key_helper/compos_key.cpp[diff]
compos/compos_key_helper/compos_key.h[diff]
compos/compos_key_helper/compos_key_main.cpp[diff]
compos/compos_key_helper/compos_key_test.cpp[diff]
compos/composd/src/odrefresh_task.rs[diff]
compos/composd/src/service.rs[diff]
compos/src/artifact_signer.rs[diff]
compos/src/compos_key.rs[Added - diff]
compos/src/compsvc.rs[diff]
compos/src/compsvc_main.rs[diff]
compos/src/signing_key.rs[diff]
compos/tests/java/android/compos/test/ComposTestCase.java[diff]
compos/verify/Android.bp[Renamed from compos/verify_key/Android.bp - diff]
compos/verify/native/Android.bp[Added - diff]
compos/verify/native/lib.rs[Added - diff]
compos/verify/native/verify_native.cpp[Added - diff]
compos/verify/native/verify_native.h[Added - diff]
compos/verify/verify.rs[Added - diff]
compos/verify_key/verify_key.rs[Deleted - diff]

26 files changed

tree: bb85000ec0f7df1fe64b933a211c77952ae82240

README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.