16 Oct, 2019

1 commit

• 03f8d3982   MA-15575-3 Add support for oemlock 1.0 hal ... Browse Code »

  Add commands to read oem device unlock state from
  trusty avb app. Use the oem device unlock state to
  determine if the device can be unlocked instead of
  the state in persistdata part.

  Test: Read oem device unlock state from avb app.

  Change-Id: Ifccaa788ba0f681c2b3a47151c8474e8da5a2559
  Signed-off-by: Ji Luo

  Ji Luo

  2019-10-16 16:04:49 +0800  

20 Aug, 2019

1 commit

• 631149fc0   MA-15321-3 Support secure unlock feature ... Browse Code »

  12

  Decrypt and verify the secure credential in keymaster TA, unlock
  operation can only be allowed after secure credential verify pass.

  Since the mppubk can only be generated on hab closed imx8q, so secure
  unlock feature can only supported when hab is closed.

  Test: secure unlock credential verify on hab closed imx8mm_evk.

  Change-Id: I1ab5e24df28d1e75ff853de3adf29f34da1d0a71
  Signed-off-by: Ji Luo

  Ji Luo

  2019-08-20 10:11:13 +0800  

25 Jul, 2019

3 commits

• 3fc3f5219   MA-15151 Limit some hwcrypto commands within bootloader ... Browse Code »

  12

  It can be dangerous to export some hwcrypto commands to Linux,
  add commands to limit some commands within bootloader.

  Test: hwcrypto commands can't be used after locking boot state.

  Change-Id: Ib0a96a87f661778c133178840d8dccf49f151c22
  Signed-off-by: Ji Luo

  Ji Luo

  2019-07-25 17:06:00 +0800  
• 6c1087c03   MA-15017 Add new command to generate bkek from trusty ... Browse Code »

  12

  Add new command to generate bkek from trusty.

  Test: generate and dump bkek.

  Change-Id: I6b2a30b87c755eecd00ced7c53cfb86e432040de
  Signed-off-by: Ji Luo

  Ji Luo

  2019-07-25 17:05:59 +0800  
• 52300d644   MA-15019-1 Support Manufacture Protection public key generation ... Browse Code »

  12

  Add new keymaster commands to get Manufacure Production key (mppubk).
  Since the mppubk can only be generated in OEM CLOSED imx8q board, so
  we can only use this command when the board is HAB/AHAB closed.

  Commands to extract the mppubk:
  * $fastboot oem get-mppubk
  * $fastboot get_staged mppubk.bin

  Test: Generate and dump the mppubk.bin

  Change-Id: Idc59e78ca6345497e744162664b8293f50d1eda4
  Signed-off-by: Ji Luo

  Ji Luo

  2019-07-25 17:05:51 +0800  

24 May, 2019

1 commit

• ffca28682   MLK-18591-4 android: iot: Import ql-tipc lib for Trusty OS ... Browse Code »

  12

  The lib provided ql-tipc communication channel with
  Trusty OS.
  Also the AVB, Keymaster, hwcrypto and SecureStorage service
  tipc client implement in this lib.

  Change-Id: I0ab1ec9ee1b6f272b960c2e944008283c2c9249a
  Signed-off-by: Haoran.Wang
  (cherry picked from commit 8fb370dd80fbb293b58115d2e7fc4970813773c7)
  (cherry picked from commit 0ccdd527a794c2b450658980361a7857ce7495c9)

  Haoran.Wang

  2019-05-24 19:28:56 +0800