| commit | 195f89cd06b03af91cd80b59896a2e2f5291dc76 | [log] [tgz] |
|---|---|---|
| author | Shikha Panwar <shikhapanwar@google.com> | Wed Nov 23 16:20:34 2022 +0000 |
| committer | Shikha Panwar <shikhapanwar@google.com> | Mon Nov 28 19:31:05 2022 +0000 |
| tree | 3af3974314bd0f6b2bcd2f6a4929d8c2f53463cd | |
| parent | 2ce2057d214d9f8179a31bf73a5de14e17fd4d95 [diff] |
Change block cipher mode from XTS -> HCTR2 We will be using aes-hctr2-plain64 cipher for encryptedstore. Reason: With XTS, an attacker can tamper or replay at 16-byte granularity. A bit flip in the encrypted text diffuses randomly in plaintext, but only within an aligned 16-byte range. But with HCTR2 this diffusion will be at crypto sector size. For IV we use the 64 bytes' sector number referred to as "plain64". Bug: 259253336 Test: Run a vm with --storage & --storage-size flag Change-Id: I1ecd98072d6cb552d93fbc4053a3e6f004e0854e
This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.