• Kenny Root's avatar
    Add keymaster to keystore with soft implementation · 70e3a86a
    Kenny Root authored
    Add hardware crypto capabilities to keystore. This allows hardware
    escrow of private key material.
    
    There is also an OpenSSL engine that connects to keystore to allow use
    of the keystore keys from native code built into the platform.
    
    This includes a software implementation of keymaster using OpenSSL
    as the backend.  This is just as insecure as the previous solution,
    but it's needed so devices without hardware support can continue
    to operate in the new scheme without a lot of compatibility code.
    
    Change-Id: I2bc67766e1f633ef1cbbd2874a65962074e84f4f
    70e3a86a
keystore.cpp 38.3 KB