AVF to shift to default instance of Secretkeeper
Use default instance of Sk, instead of nonsecure instance. The latter
is (as the name indicated) not secure and was for testing only. Now that
some test devices have secure implementation of Secretkeeper, shift to
using the default instance.
Bug: 291213394
Test: atest MicrodroidTests#encryptedStorageIsPersistent
Change-Id: I3b9a2dad62dd239f58b8891084fa24f9625025c8
diff --git a/virtualizationmanager/src/aidl.rs b/virtualizationmanager/src/aidl.rs
index 0655e5f..6ba5cf4 100644
--- a/virtualizationmanager/src/aidl.rs
+++ b/virtualizationmanager/src/aidl.rs
@@ -109,9 +109,8 @@
const MICRODROID_OS_NAME: &str = "microdroid";
-// TODO(b/291213394): Use 'default' instance for secretkeeper instead of 'nonsecure'
const SECRETKEEPER_IDENTIFIER: &str =
- "android.hardware.security.secretkeeper.ISecretkeeper/nonsecure";
+ "android.hardware.security.secretkeeper.ISecretkeeper/default";
const UNFORMATTED_STORAGE_MAGIC: &str = "UNFORMATTED-STORAGE";