GitLab

Attestation is the process of proving ownership of a private
cryptographic key. One side issues a challenge, and the entity must sign
the challenge using a private key. chromeOS exposes blessed extension
APIs that allow force-installed policy extensions to issue attestation
challenges. By default, these are not available on lacros.

This CL adds basic plumbing for
enterprise.platformKeys.challengeMachineKey. This is not intended to be
a fully functional implementation -- that will require further
refactoring and debugging from domain experts.

Bug: 1113443
Change-Id: I8781ef1367242de59faacb372cf6453925fdfa86
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2324303Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Maksim Ivanov <emaxx@chromium.org>
Reviewed-by: Karan Bhatia <karandeepb@chromium.org>
Reviewed-by: James Cook <jamescook@chromium.org>
Reviewed-by: Michael Ershov <miersh@google.com>
Commit-Queue: Erik Chen <erikchen@chromium.org>
Auto-Submit: Erik Chen <erikchen@chromium.org>
Cr-Commit-Position: refs/heads/master@{#797435}