dts: km3: Device ID attestation for ac214 [1/1]

PD#SWPL-12224

Problem:
Need to add support for device ID attestation

Solution:
1. Add new key slot, attestationdevidbox, to unify keys

Verify:
1. Android Q + Newton↵
2. run cts -m CtsKeystoreTestCases -t \
   android.keystore.cts.KeyAttestationTest#testDeviceIdAttestation

Change-Id: If16a35af4b63d19dcecf1319d6f0ea974ce64dd2
Signed-off-by: Mingyen Hung <mingyen.hung@amlogic.com>
This commit is contained in:
Mingyen Hung
2019-10-31 12:26:48 +08:00
committed by Jianxin Pan
parent 3936b23968
commit 3fc8e440de
2 changed files with 14 additions and 2 deletions

View File

@@ -392,7 +392,7 @@
unifykey{
compatible = "amlogic, unifykey";
status = "ok";
unifykey-num = <16>;
unifykey-num = <17>;
unifykey-index-0 = <&keysn_0>;
unifykey-index-1 = <&keysn_1>;
unifykey-index-2 = <&keysn_2>;
@@ -409,6 +409,7 @@
unifykey-index-13= <&keysn_13>;
unifykey-index-14= <&keysn_14>;
unifykey-index-15= <&keysn_15>;
unifykey-index-16= <&keysn_16>;
keysn_0: key_0{
key-name = "usid";
key-device = "normal";
@@ -492,6 +493,11 @@
key-device = "secure";
key-permit = "read","write","del";
};
keysn_16:key_16{
key-name = "attestationdevidbox";// attest dev id box
key-device = "secure";
key-permit = "read","write","del";
};
};//End unifykey
efusekey:efusekey{

View File

@@ -451,7 +451,7 @@
unifykey{
compatible = "amlogic, unifykey";
status = "ok";
unifykey-num = <17>;
unifykey-num = <18>;
unifykey-index-0 = <&keysn_0>;
unifykey-index-1 = <&keysn_1>;
unifykey-index-2 = <&keysn_2>;
@@ -469,6 +469,7 @@
unifykey-index-14= <&keysn_14>;
unifykey-index-15= <&keysn_15>;
unifykey-index-16= <&keysn_16>;
unifykey-index-17= <&keysn_17>;
keysn_0: key_0{
key-name = "usid";
@@ -558,6 +559,11 @@
key-device = "secure";
key-permit = "read","write","del";
};
keysn_17:key_17{
key-name = "attestationdevidbox";// attest dev id box
key-device = "secure";
key-permit = "read","write","del";
};
};//End unifykey
efusekey:efusekey{