diff options
| author | David Zeuthen <zeuthen@google.com> | 2020-05-11 14:04:54 -0400 |
|---|---|---|
| committer | David Zeuthen <zeuthen@google.com> | 2021-01-05 18:30:59 -0500 |
| commit | 630de2a93e48d8f9ed2a23806d46b7a7a6b46c74 (patch) | |
| tree | 7af50ea784609a5f340dd82ae7c386aae610668c /identity/support/src/cppbor_parse.cpp | |
| parent | 19086060541a2a812e76921d3d6a6bdb4f97c521 (diff) | |
Identity Credential: Switch default implementation to use libeic.
Introduce platform-neutral C library ("libeic") which can be used to
implement an Identity Credential Trusted Application/Applet in Secure
Hardware.
The libeic library is intentionally low-level, has no dependencies
(not even libc), uses very little run-time memory (less than 500 bytes
during a provisioning or presentation session), and doesn't
dynamically allocate any memory. Crypto routines are provided by the
library user through a simple crypto interface defined in EicOps.
Also provide an Android-side HAL implementation designed to
communicate with libeic running in Secure Hardware outside
Android. Abstract out communications between HAL and TA in a couple of
SecureHardwareProxy* classes which mimic libeic 1:1.
The default implementation of the HAL is a combination of the
aforementioned HAL using libeic in-process backed by BoringSSL for the
crypto bits.
Test: atest VtsHalIdentityTargetTest
Test: atest android.security.identity.cts
Bug: 170146643
Change-Id: I3bf43fa7fd9362f94023052591801f2094a04607
Diffstat (limited to 'identity/support/src/cppbor_parse.cpp')
0 files changed, 0 insertions, 0 deletions
