No description
673d34addb
Rename the LskfBound superencryption key and superencryption type (also known as per-boot) to AfterFirstUnlock. This makes it much clearer what the protection of this key is. This includes avoiding the misleading use of "LSKF"; the secret that's actually relevant is the user's synthetic password, which is most commonly unlocked with the LSKF but can potentially be unlocked in other ways. This is also helpful for the planned change to make the user's super keys exist even while the user doesn't have an LSKF. Bug: 296464083 Test: atest -p --include-subdirs system/security/keystore2 Test: atest CtsKeystoreTestCases Flag: exempt, mechanical refactoring and comment changes Change-Id: I9b16934f37222fef2bf01830f521928ef2c1853a |
||
---|---|---|
fsverity | ||
fsverity_init | ||
identity | ||
keystore | ||
keystore-engine | ||
keystore2 | ||
ondevice-signing | ||
prng_seeder | ||
provisioner | ||
.clang-format | ||
.gitignore | ||
Android.bp | ||
METADATA | ||
MODULE_LICENSE_APACHE2 | ||
NOTICE | ||
OWNERS | ||
PREUPLOAD.cfg | ||
rustfmt.toml |