tree: 7caa29fa3587fce09ef777871800e5c230e261a6
  1. google_root_ssl_certificates/
  2. kms/
  3. root_ssl_certificates/
  4. syscall-check/
  5. tee_manager/
  6. BUILD.gn
  7. README.md
src/security/bin/README.md

Fuchsia Security: Binaries

Overview

This directory contains all source code that results in a component, package or other binary that is intended to be included in some assembled version of Fuchsia.

Project Descriptions

  • root_ssl_certificates: Public Chrome Root Store CA certificates. Serves as the general-purpose TLS trust store for outbound web traffic and third-party services.

  • google_root_ssl_certificates: Google Trust Services (GTS) root CA certificates. Restricts trust to the publicly operated Google Trust Services authorities used by services connecting to Google backends (Feedback, Cobalt, Timekeeper, and SWD in restricted mode).

  • kms: Key Management Service for hardware-backed key storage and cryptographic operations.

  • tee_manager: Fuchsia - TEE communication stack. Marshals trusted application invocations; handles secure storage RPCs.

  • syscall-check: Diagnostic utility to check whether specific security-sensitive system calls are enabled or disabled.