08 Jan, 2021

1 commit

  • The device IDs are provisioned from bootloader, this commit
    add commands to provision the deivce IDs:
    $ fastboot oem append-device-id

    Test: Device IDs provision and attest.

    Change-Id: Id3c737d3da02f7ba463e51b0525f3cb9bcf0c6d1
    Signed-off-by: Ji Luo
    (cherry picked from commit 7575ac07ac625c35269868511297385a69c96196)

    Ji Luo
     

16 Jun, 2020

1 commit

  • Decrypt and verify the secure credential in keymaster TA, unlock
    operation can only be allowed after secure credential verify pass.

    Since the mppubk can only be generated on hab closed imx8q, so secure
    unlock feature can only supported when hab is closed.

    Test: secure unlock credential verify on hab closed imx8mm_evk.

    Change-Id: I1ab5e24df28d1e75ff853de3adf29f34da1d0a71
    Signed-off-by: Ji Luo
    (cherry picked from commit 631149fc0fc8ce035311949db643c2708e41435a)

    Ji Luo
     

06 May, 2020

1 commit

  • The lib provided ql-tipc communication channel with
    Trusty OS.
    Also the AVB, Keymaster, hwcrypto and SecureStorage service
    tipc client implement in this lib.

    Change-Id: I0ab1ec9ee1b6f272b960c2e944008283c2c9249a
    Signed-off-by: Haoran.Wang
    (cherry picked from commit 8fb370dd80fbb293b58115d2e7fc4970813773c7)
    (cherry picked from commit 0ccdd527a794c2b450658980361a7857ce7495c9)
    (cherry picked from commit ffca28682c5a9375c29b3036a156aff190341960)

    Haoran.Wang