| commit | cecb0aa3a6a020ca35bcf1c8bc586546b7f7296e | [log] [tgz] |
|---|---|---|
| author | Pierre-Clément Tosi <ptosi@google.com> | Wed Feb 08 16:57:54 2023 +0000 |
| committer | Pierre-Clément Tosi <ptosi@google.com> | Sat Feb 25 13:15:19 2023 +0000 |
| tree | ac2e3c2192314245ea37cf56def72bb73dcc36b5 | |
| parent | b2d8aa7c723456e8ca4a42880b6746f65bddd002 [diff] |
microdroid_manager: Zero DICE hidden input As we assume that instance.img entries can't be individually modified without it being detected (thanks to the avf,new-instance flag), there is no need to generate a random salt for DICE in microdroid_manager if pvmfw has run (i.e. avf,strict-boot is received) so use a zero value if one isn't found in the instance.img. This makes pvmfw the only source of per-instance secret uniqueness, enabling end-to-end tests to validate that functionality of pvmfw. Bug: 268307476 Test: atest MicrodroidTestApp Change-Id: Ia1c4f056b8106ddae4f2fd753fbc19e4c203b65a
This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.