Revert "Add ROLLBACK_RESISTANCE tag to key usage" am: c0a46c8106
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/vold/+/15718439 Change-Id: Id48e98c471efd97e378d92f63f5808528d3fb1ae
This commit is contained in:
commit
28f8d9e74e
1 changed files with 1 additions and 4 deletions
|
@ -383,9 +383,7 @@ static bool encryptWithKeystoreKey(Keystore& keystore, const std::string& dir,
|
|||
const km::AuthorizationSet& keyParams, const KeyBuffer& message,
|
||||
std::string* ciphertext) {
|
||||
km::AuthorizationSet opParams =
|
||||
km::AuthorizationSetBuilder()
|
||||
.Authorization(km::TAG_ROLLBACK_RESISTANCE)
|
||||
.Authorization(km::TAG_PURPOSE, km::KeyPurpose::ENCRYPT);
|
||||
km::AuthorizationSetBuilder().Authorization(km::TAG_PURPOSE, km::KeyPurpose::ENCRYPT);
|
||||
km::AuthorizationSet outParams;
|
||||
auto opHandle = BeginKeystoreOp(keystore, dir, keyParams, opParams, &outParams);
|
||||
if (!opHandle) return false;
|
||||
|
@ -414,7 +412,6 @@ static bool decryptWithKeystoreKey(Keystore& keystore, const std::string& dir,
|
|||
auto bodyAndMac = ciphertext.substr(GCM_NONCE_BYTES);
|
||||
auto opParams = km::AuthorizationSetBuilder()
|
||||
.Authorization(km::TAG_NONCE, nonce)
|
||||
.Authorization(km::TAG_ROLLBACK_RESISTANCE)
|
||||
.Authorization(km::TAG_PURPOSE, km::KeyPurpose::DECRYPT);
|
||||
auto opHandle = BeginKeystoreOp(keystore, dir, keyParams, opParams, nullptr);
|
||||
if (!opHandle) return false;
|
||||
|
|
Loading…
Reference in a new issue