Loading security/secretkeeper/aidl/vts/secretkeeper_test_client.rs +4 −8 Original line number Diff line number Diff line Loading @@ -26,7 +26,7 @@ use authgraph_vts_test as ag_vts; use authgraph_boringssl as boring; use authgraph_core::key; use coset::{CborSerializable, CoseEncrypt0}; use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy}; use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy, MissingAction}; use secretkeeper_client::dice::OwnedDiceArtifactsWithExplicitKey; use secretkeeper_client::SkSession; use secretkeeper_core::cipher; Loading Loading @@ -255,16 +255,12 @@ fn sealing_policy(dice: &[u8]) -> Vec<u8> { let security_version: i64 = -70005; let constraint_spec = [ ConstraintSpec::new( ConstraintType::ExactMatch, vec![authority_hash], /* Optional */ false, ), ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], false), ConstraintSpec::new(ConstraintType::ExactMatch, vec![authority_hash], MissingAction::Fail), ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], MissingAction::Fail), ConstraintSpec::new( ConstraintType::GreaterOrEqual, vec![config_desc, security_version], true, MissingAction::Ignore, ), ]; Loading Loading
security/secretkeeper/aidl/vts/secretkeeper_test_client.rs +4 −8 Original line number Diff line number Diff line Loading @@ -26,7 +26,7 @@ use authgraph_vts_test as ag_vts; use authgraph_boringssl as boring; use authgraph_core::key; use coset::{CborSerializable, CoseEncrypt0}; use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy}; use dice_policy::{ConstraintSpec, ConstraintType, DicePolicy, MissingAction}; use secretkeeper_client::dice::OwnedDiceArtifactsWithExplicitKey; use secretkeeper_client::SkSession; use secretkeeper_core::cipher; Loading Loading @@ -255,16 +255,12 @@ fn sealing_policy(dice: &[u8]) -> Vec<u8> { let security_version: i64 = -70005; let constraint_spec = [ ConstraintSpec::new( ConstraintType::ExactMatch, vec![authority_hash], /* Optional */ false, ), ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], false), ConstraintSpec::new(ConstraintType::ExactMatch, vec![authority_hash], MissingAction::Fail), ConstraintSpec::new(ConstraintType::ExactMatch, vec![key_mode], MissingAction::Fail), ConstraintSpec::new( ConstraintType::GreaterOrEqual, vec![config_desc, security_version], true, MissingAction::Ignore, ), ]; Loading