No description
Find a file
Tri Vo 74997ed800 keystore: Fix ID rotation window
KeyMint spec requires unique ID rotation to happen every 30 days (or
more precisely 2592000000 milliseconds) starting at UNIX epoch time.

Keystore is also supposed to set the RESET_SINCE_ID_ROTATION to indicate
"whether the device has been factory reset since the last unique ID
rotation".

However, instead Keystore sets RESET_SINCE_ID_ROTATION if there has been
a factory reset in the last 30 days counting back from now, which is
different and will give one extra UNIQUE_ID value in a subsequent
period:

For example, if there's a factory reset (marked as :) in the 3rd period
(periods delimited by |), the first half of the 4th period will have
RESET_SINCE_ID_ROTATION set and get a different UNIQUE_ID value than it
should:

Want = |   A    |   B    | C : C2 |   D    | ...
Get  = |   A    |   B    | C : C2 | D2 : D | ...

Bug: 289774200
Test: keystore2_test
Change-Id: I156de902931915cd1ae7ad2eba63fd0276f15ae0
2023-07-25 16:40:31 -04:00
diced Standardise safety comments for unsafe blocks. 2023-07-07 13:42:25 +01:00
fsverity Update fsverity+odsign protos to protobuf3. 2023-06-28 08:05:10 +00:00
fsverity_init fsverity_init: remove unneeded functionality 2023-07-06 18:36:16 +00:00
identity credstore: remove unused variable 2023-07-06 17:45:32 +00:00
keystore Keystore: Use waitForService() instead of getService() 2023-07-18 14:58:36 -04:00
keystore-engine Adding tests to verify EVP_PKEY_from_keystore2 API [Keystore2-engine]. 2023-05-23 19:28:24 +00:00
keystore2 keystore: Fix ID rotation window 2023-07-25 16:40:31 -04:00
ondevice-signing ondevice-signing: merge createCertificate() into createSelfSignedCertificate() 2023-07-05 22:14:36 +00:00
prng_seeder Don't set /dev/hwrng to O_NONBLOCK 2023-03-09 17:51:58 +00:00
provisioner rkp_factory_extraction_tool: append drm CSRs 2023-07-12 15:55:13 -07:00
.clang-format Add PREUPLOAD to require clang-format. 2017-12-04 17:06:49 -07:00
.gitignore Add .gitignore. 2020-11-24 09:59:17 -08:00
Android.bp [LSC] Add LOCAL_LICENSE_KINDS to system/security 2021-02-14 10:37:25 -08:00
METADATA Add METADATA to system/security: Apache2+BSD=NOTICE 2020-05-04 13:15:58 -07:00
MODULE_LICENSE_APACHE2 Add NOTICE and MODULE_LICENSE_ files. 2015-11-02 09:13:29 -08:00
NOTICE Add NOTICE and MODULE_LICENSE_ files. 2015-11-02 09:13:29 -08:00
OWNERS Update system/security owners 2023-07-18 14:51:14 -04:00
PREUPLOAD.cfg Update rustfmt options 2020-08-19 15:19:21 +00:00
rustfmt.toml Enable rustfmt for system/security 2020-06-23 15:50:23 +02:00