| commit | 0503cb0cbff6e27b611c93cf7aade1e8fe077ff9 | [log] [tgz] |
|---|---|---|
| author | Shikha Panwar <shikhapanwar@google.com> | Fri Jan 05 10:11:28 2024 +0000 |
| committer | Shikha Panwar <shikhapanwar@google.com> | Fri Jan 12 15:37:39 2024 +0000 |
| tree | e5107b1504bf43949d7ce91a6ab2de041072ad1f | |
| parent | c8ba73cdf1952e97d97fea519c6e3e1fab1f5018 [diff] |
Secretkeeper: Differentiate the VM ID based on salt VMs should have unique ID per instance(this is the identifier used in Secretkeeper). For non-protected VM, derive it deterministically using hkdf() on the salt in the instance data. Note this will not work for protected VM which uses all 0s as that Microdroid salt. Test: MicrodroidTests#encryptedStorageIsPersistent Bug: 291213394 Change-Id: Ic42f34281e6fffbc1dedd0fdb5011524c26a4cf8
Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.
Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.
If you want a quick start, see the getting started guideline and follow the steps there.
For in-depth explanations about individual topics and components, visit the following links.
AVF components:
AVF APIs:
How-Tos: