Specialize the KM context to use encrypted key blobs

These key blobs are intended to be exported outside the VM, without need
for further encryption. This will allows a limited form of persistence
for VMs between boots of the same code.

The authorization set is left in plain text which reveals some metadata
about the key but does not compromise its security.

Bug: 190578423
Test: atest MicrodroidHostTestCases
Change-Id: I47a0f80e2137e189634b77c0b4aafb32d002be50
6 files changed
tree: 3600ae9a91be3f667ab4b54df171f0a14cf45992
  1. apex/
  2. apkdmverity/
  3. authfs/
  4. compos/
  5. demo/
  6. docs/
  7. javalib/
  8. launcher/
  9. microdroid/
  10. microdroid_manager/
  11. tests/
  12. virtualizationservice/
  13. vm/
  14. vmconfig/
  15. zipfuse/
  16. .clang-format
  17. Android.bp
  18. OWNERS
  19. PREUPLOAD.cfg
  20. README.md
  21. TEST_MAPPING
README.md

Virtualization

This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.