commit c96b72e68fd9c390337de4f90ad49eaead1443c6
author Andrew Scull <ascull@google.com> Fri Jan 21 14:36:55 2022 +0000
committer Andrew Scull <ascull@google.com> Fri Jan 21 20:11:54 2022 +0000
tree 32dd73e8517ca139b7dc83704185f7da152d5388
parent f819594d14896602d93e58ed4b4b7bb7b7bd9b69

Encrypt instance.img data with key from sealing CDI

Microdroid connects to diced to retreive the sealing CDI from which it
derives the key used to encrypt the instance.img data.

Bug: 214231981
Test: run microdroid
Change-Id: Ifee99e3c55b649d236fefcbbc9132613fd35660e

microdroid_manager/Android.bp

diff --git a/microdroid_manager/Android.bp b/microdroid_manager/Android.bp
index 23a61d9..f888b80 100644
--- a/microdroid_manager/Android.bp
+++ b/microdroid_manager/Android.bp
@@ -9,6 +9,7 @@
     edition: "2018",
     prefer_rlib: true,
     rustlibs: [
+        "android.security.dice-rust",
         "android.system.virtualizationservice-rust",
         "android.system.virtualmachineservice-rust",
         "libanyhow",