Specialize the KM context to use encrypted key blobs
These key blobs are intended to be exported outside the VM, without need
for further encryption. This will allows a limited form of persistence
for VMs between boots of the same code.
The authorization set is left in plain text which reveals some metadata
about the key but does not compromise its security.
Bug: 190578423
Test: atest MicrodroidHostTestCases
Change-Id: I47a0f80e2137e189634b77c0b4aafb32d002be50
diff --git a/microdroid/keymint/Android.bp b/microdroid/keymint/Android.bp
index 5a87145..6d651b9 100644
--- a/microdroid/keymint/Android.bp
+++ b/microdroid/keymint/Android.bp
@@ -25,6 +25,7 @@
"libkeymint",
"liblog",
"libpuresoftkeymasterdevice",
+ "libsoft_attestation_cert",
"libutils",
],
local_include_dirs: [
@@ -32,6 +33,7 @@
],
srcs: [
"MicrodroidKeyMintDevice.cpp",
+ "MicrodroidKeymasterContext.cpp",
"service.cpp",
],
}