• Home
Name Date Size #Lines LOC

..--

doc/04-Jul-2025-414347

oemlock/04-Jul-2025-298177

rust/04-Jul-2025-959682

storage/04-Jul-2025-546348

Android.bpD04-Jul-20255.7 KiB235226

OWNERSD04-Jul-202585 32

README.mdD04-Jul-2025841 1511

composite_serialization.cppD04-Jul-20251.4 KiB5330

composite_serialization.hD04-Jul-20251.4 KiB4414

confui_sign_server.cppD04-Jul-20253.4 KiB9159

confui_sign_server.hD04-Jul-20251.1 KiB3717

device_tpm.cppD04-Jul-20251.8 KiB5937

device_tpm.hD04-Jul-20251.1 KiB4014

encrypted_serializable.cppD04-Jul-202511.1 KiB322282

encrypted_serializable.hD04-Jul-20252.5 KiB6418

encrypted_serializable_test.cppD04-Jul-20252.1 KiB5630

gatekeeper_responder.cppD04-Jul-20252.2 KiB6645

gatekeeper_responder.hD04-Jul-20251 KiB3714

gatekeeper_storage.hD04-Jul-20251.5 KiB4716

hmac_serializable.cppD04-Jul-20255.1 KiB152125

hmac_serializable.hD04-Jul-20252.4 KiB6624

in_process_tpm.cppD04-Jul-20255.6 KiB193145

in_process_tpm.hD04-Jul-20251.4 KiB5217

json_serializable.cppD04-Jul-20255.2 KiB160121

json_serializable.hD04-Jul-2025960 309

keymaster_responder.cppD04-Jul-20255.9 KiB127105

keymaster_responder.hD04-Jul-20251 KiB3714

primary_key_builder.cppD04-Jul-20255.1 KiB145108

primary_key_builder.hD04-Jul-20251.4 KiB5123

proxy_keymaster_context.hD04-Jul-20256.6 KiB181132

secure_env_not_windows_main.cppD04-Jul-202518.3 KiB443355

secure_env_windows_lib.cppD04-Jul-20255.1 KiB13996

secure_env_windows_lib.hD04-Jul-20251.6 KiB4818

secure_env_windows_main.cppD04-Jul-20251.8 KiB5128

soft_gatekeeper.hD04-Jul-20255.8 KiB177129

suspend_resume_handler.cppD04-Jul-20254.6 KiB12691

suspend_resume_handler.hD04-Jul-20252.4 KiB7830

test_tpm.cppD04-Jul-20251.1 KiB3714

test_tpm.hD04-Jul-2025891 3613

tpm.hD04-Jul-2025812 309

tpm_attestation_record.cppD04-Jul-20257.2 KiB207153

tpm_attestation_record.hD04-Jul-20252.6 KiB7551

tpm_auth.cppD04-Jul-20251.3 KiB4825

tpm_auth.hD04-Jul-20251.3 KiB4817

tpm_commands.cppD04-Jul-20256 KiB152130

tpm_commands.hD04-Jul-2025755 276

tpm_encrypt_decrypt.cppD04-Jul-20253.2 KiB9568

tpm_encrypt_decrypt.hD04-Jul-20251.7 KiB4912

tpm_ffi.cppD04-Jul-20252.4 KiB7957

tpm_ffi.hD04-Jul-20251.3 KiB4314

tpm_gatekeeper.cppD04-Jul-20257.1 KiB229185

tpm_gatekeeper.hD04-Jul-20252.7 KiB8949

tpm_hmac.cppD04-Jul-20255.4 KiB155124

tpm_hmac.hD04-Jul-20252.1 KiB6522

tpm_key_blob_maker.cppD04-Jul-202510.6 KiB294224

tpm_key_blob_maker.hD04-Jul-20253.1 KiB8438

tpm_keymaster_context.cppD04-Jul-202525.4 KiB687549

tpm_keymaster_context.hD04-Jul-20255.6 KiB148101

tpm_keymaster_enforcement.cppD04-Jul-202510.9 KiB336269

tpm_keymaster_enforcement.hD04-Jul-20252.6 KiB7137

tpm_random_source.cppD04-Jul-20253.6 KiB10374

tpm_random_source.hD04-Jul-20251.3 KiB4415

tpm_remote_provisioning_context.cppD04-Jul-20258.9 KiB255208

tpm_remote_provisioning_context.hD04-Jul-20252.7 KiB7345

tpm_resource_manager.cppD04-Jul-20252.7 KiB8856

tpm_resource_manager.hD04-Jul-20252.3 KiB8642

tpm_serialize.cppD04-Jul-20252.5 KiB8958

tpm_serialize.hD04-Jul-20251.8 KiB5721

worker_thread_loop_body.cppD04-Jul-20252.8 KiB7846

worker_thread_loop_body.hD04-Jul-2025985 3110

README.md

1Host process substituting for a TEE (Trusted Execution Environment). Used to
2run backing implementations of Android HALs that normally delegate to a TEE
3environment, specifically ConfirmationUI, Gatekeeper, and Keymint.
4
5Gatekeeper and Keymint communicate with `secure_env` through virtio-console
6channels connected to FIFO files on the host. The display part of
7ConfirmationUI is runs in the `webRTC` host process, which delegates signing
8operations only to `secure_env`.
9
10Before entering the kernel, the u-boot bootloader writes some information
11about the device image files into the keymint channel to prepare it with
12the authenticated version number of the operating system.
13
14[![linkage](./doc/linkage.png)](https://cs.android.com/android/platform/superproject/+/master:device/google/cuttlefish/host/commands/secure_env/doc/linkage.svg)
15