| commit | 8f7fc1a0f1b99e8e4b3ed66d627174f6ff7e319c | [log] [tgz] |
|---|---|---|
| author | Shikha Panwar <shikhapanwar@google.com> | Wed Apr 10 10:41:34 2024 +0000 |
| committer | Shikha Panwar <shikhapanwar@google.com> | Thu May 23 11:49:49 2024 +0000 |
| tree | 4535674876c8210022e4abb138de985bc156adad | |
| parent | 1cba46d4b5dbec9fe131fb4102601416317317db [diff] |
Include instance-hash in DICE chain In order to limit access to a particular VM instance, local verifiers of DICE chains (such as Secretkeeper) require instance-hash to be part DICE chains. Let this be part of DICE chain of VM (specifically, part of vm_entry certificate). Test: #config_descriptor_with_instance_hash & #config_descriptor_without_instance_hash Bug: 291245237 Change-Id: Ib5666dfbd9ed32250bc37903c134e806db6ddf9c
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: