tree b8b8094a390e1e3c6d14c06835fb47dc97a0c5ec
parent eaad67939432456802418579e3b7cbceb1b2cbd6
author David Drysdale <drysdale@google.com> 1634116778 +0100
committer David Drysdale <drysdale@google.com> 1636556736 +0000

Improve UNIQUE_ID generation

 - Remove unused generate_unique_id() function.
 - Fix unique ID generation code to use ATTESTATION_APPLICATION_ID
   rather than APPLICATION_ID.
 - Add km_openssl helper functions to build a UNIQUE_ID value from the
   inputs and an HBK value for the HMAC-SHA256 function.
 - Treat Tag::INCLUDE_UNIQUE_ID as a key generation parameter, similar
   to the various ATTESTATION_ID_* tags.

Individual KeyMint implementations still need to provide an
implementation of AttestationContext::GenerateUniqueId(), but that
implementation can be a one-line invocation of
keymaster::generate_unique_id() using a suitable HBK.

Bug: 202487002
Test: VtsAidlKeyMintTargetTest
Merged-In: I3eb8cf22cf52a6d5c7a085ae497500800ecd5438
Change-Id: I3eb8cf22cf52a6d5c7a085ae497500800ecd5438
Ignore-AOSP-First: cherry-pick from aosp/master