aosp-part-security

Android Verified Boot establishes a hardware root of trust chain that SELinux policy relies on, enforcing mandatory access controls across validated per-app sandboxes. This Skill maps these subsystem interactions to evaluate security architectures.

Evaluating a Credential Manager provider requires reasoning about passkeys and FIDO2 integrations across system server, framework, and HAL boundaries. This Skill provides structured analysis for assessing credential provider designs end-to-end.

Trusty TEE and Gatekeeper secure Android keystore and Keymint operations by providing hardware-backed isolation for device authentication. This Skill analyzes these key management flows to assess security properties across the AOSP stack.

You can analyze the DRM lifecycle including MediaDrm and Widevine across system server, framework, and HAL boundaries. This Skill offers end-to-end reasoning about DRM session interactions and OEMCrypto implementations.

Understanding dm-verity and Android Verified Boot is required to assess secure boot architectures from the hardware root of trust to per-app sandboxes. This Skill requires knowledge of AVB designs for comprehensive security evaluation.

Hardware-backed attestation verifies Android device integrity before trusting key management flows, ensuring keys are generated in a secure environment. This Skill maps attestation alongside keystore and Keymint to evaluate security properties.