No description
Find a file
Kenny Root fea9aa6eb8 keymaster: add flags indicating feature support
For wrapping the disk encryption secret, we add a flag that indicates it
can be done without having to start some storage daemon which the
trusted OS will query to get data needed to load up the keys. This
usually means that the "key blob" we store is actually just the RSA key
encrypted with the device's KEK and not a reference to an encrypted
filesystem stored on /data

Also to allow other providers to upgrade to V3 of the header, we add
flags to show whether the keymaster supports different key types. This
allows keymaster HALs to support the whole device encryption secret
wrapping without needing to implement DSA and EC key handling. The V2
header made support implicit.

(cherry picked from commit 8a3849e26f)

Change-Id: I49be8403faf9f4c3888c84848b3009b44ab6d183
2014-04-18 14:03:35 -07:00
include/hardware keymaster: add flags indicating feature support 2014-04-18 14:03:35 -07:00
modules am dbcec633: am dd6e1a01: Merge "Reduced most MultiHal ALOGI to ALOGV, reducing bootup logspam." into klp-modular-dev 2014-04-16 20:36:13 +00:00
tests Merge "Remove offset checks for reserved fields in sensor_t and sensors_event_t." 2014-04-11 21:06:22 +00:00
Android.mk Add liblog 2013-04-09 21:57:28 -07:00
CleanSpec.mk Add an empty CleanSpec.mk 2010-03-08 18:04:52 -08:00
hardware.c Use /(vendor|system)/lib64/hw for 64-bit HAL libraries 2014-02-16 10:07:15 -08:00
MODULE_LICENSE_APACHE2 auto import from //depot/cupcake/@135843 2009-03-03 19:32:14 -08:00
NOTICE auto import from //depot/cupcake/@135843 2009-03-03 19:32:14 -08:00