No description
Find a file
Barani Muthukumaran 3dfb094cb2 vold: Support Storage keys for FBE
To prevent keys from being compromised if an attacker
acquires read access to kernel memory, some inline
encryption hardware supports protecting the keys in
hardware without software having access to or the
ability to set the plaintext keys.  Instead, software
only sees "wrapped keys", which may differ on every boot.

'wrappedkey_v0' fileencryption flag is used to denote
that the device supports inline encryption hardware that
supports this feature. On such devices keymaster is used
to generate keys with STORAGE_KEY tag and export a
per-boot ephemerally wrapped storage key to install it in
the kernel.

The wrapped key framework in the linux kernel ensures the
wrapped key is provided to the inline encryption hardware
where it is unwrapped and the file contents key is derived
to encrypt contents without revealing the plaintext key in
the clear.

Test: FBE validation with Fscrypt v2 + inline crypt + wrapped
key changes kernel.

Bug: 147733587

Change-Id: I1f0de61b56534ec1df9baef075acb74bacd00758
2020-02-12 14:26:26 -08:00
bench Abort long-running benchmarks, report progress. 2017-11-07 09:57:12 -07:00
binder/android/os vold: Do not cache CE keys in vold 2020-01-24 00:20:22 +00:00
fs Add support for casefolding and project quotas 2020-01-14 18:11:56 -08:00
model Use std::string to return crypto device, not char * 2020-02-07 11:27:49 -08:00
tests Removed obsolete Test 2019-11-18 22:53:30 +00:00
.clang-format vold: use system-clang-format 2019-09-16 12:00:40 -07:00
Android.bp Update vold to use KM4.1 2020-02-11 15:51:04 -07:00
AppFuseUtil.cpp AppFuseUtil: Call ForceUnmount before PrepareDir. 2019-04-09 18:45:32 +01:00
AppFuseUtil.h Extract AppFuse as a util 2018-11-14 07:28:06 +00:00
Benchmark.cpp vold: use RAII wake locks 2019-06-26 10:20:30 -07:00
Benchmark.h clang-format many files. 2018-09-18 15:41:22 -07:00
BenchmarkGen.h Abort long-running benchmarks, report progress. 2017-11-07 09:57:12 -07:00
CheckEncryption.cpp Test that plaintext can't be read from disk for encrypted files. 2017-10-27 15:14:56 -07:00
CheckEncryption.h Test that plaintext can't be read from disk for encrypted files. 2017-10-27 15:14:56 -07:00
Checkpoint.cpp Fix the overflow issue in Checkpoint 2020-01-03 08:12:03 +00:00
Checkpoint.h vold: implement resetCheckpoint 2019-10-12 00:43:04 +01:00
CleanSpec.mk Add an empty CleanSpec.mk 2010-03-08 18:05:25 -08:00
cryptfs.cpp Use std::string to return crypto device, not char * 2020-02-07 11:27:49 -08:00
cryptfs.h Use std::string to return crypto device, not char * 2020-02-07 11:27:49 -08:00
Devmapper.cpp Replace manual dm ioctls with libdm. 2019-05-13 13:07:12 -07:00
Devmapper.h Replace manual dm ioctls with libdm. 2019-05-13 13:07:12 -07:00
EncryptInplace.cpp Consistently use CLOCK_MONOTONIC for timing encryption 2019-12-26 18:53:53 +00:00
EncryptInplace.h Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
FileDeviceUtils.cpp Remove excess logging in secdiscard 2019-03-21 19:13:51 +00:00
FileDeviceUtils.h clang-format many files. 2018-09-18 15:41:22 -07:00
FsCrypt.cpp vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
FsCrypt.h vold: Do not cache CE keys in vold 2020-01-24 00:20:22 +00:00
fscrypt_uapi.h vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
IdleMaint.cpp Merge "vold: use RAII wake locks" am: b585363d93 2019-06-26 19:43:21 -07:00
IdleMaint.h Add functions to handle idle maintenance 2017-11-14 15:12:30 -08:00
KeyBuffer.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
KeyBuffer.h clang-format many files. 2018-09-18 15:41:22 -07:00
Keymaster.cpp vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
Keymaster.h vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
KeyStorage.cpp vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
KeyStorage.h vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
KeyUtil.cpp vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
KeyUtil.h vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
Loop.cpp Block and wait for /dev/block/loop<N> to appear in case it was created asynchronously. 2019-06-18 15:27:37 -07:00
Loop.h clang-format many files. 2018-09-18 15:41:22 -07:00
main.cpp Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
MetadataCrypt.cpp vold: Support Storage keys for FBE 2020-02-12 14:26:26 -08:00
MetadataCrypt.h Make ext4 userdata checkpoints work with metadata encryption 2019-06-27 17:42:25 +00:00
MoveStorage.cpp vold: use RAII wake locks 2019-06-26 10:20:30 -07:00
MoveStorage.h clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkHandler.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkHandler.h clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkManager.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
NetlinkManager.h clang-format many files. 2018-09-18 15:41:22 -07:00
OWNERS Add zezeozue to OWNERS 2019-11-15 16:03:47 +00:00
PREUPLOAD.cfg vold should be fully developed in AOSP. 2018-09-11 12:08:43 -06:00
Process.cpp Convert ifstream usage into fopen() to prevent fd leaks into child processes 2019-03-26 20:10:24 +00:00
Process.h Move to modern utility methods from android::base. 2017-10-17 12:40:51 -06:00
ScryptParameters.cpp clang-format many files. 2018-09-18 15:41:22 -07:00
ScryptParameters.h clang-format many files. 2018-09-18 15:41:22 -07:00
secdiscard.cpp secdiscard: should call fsync to avoid reordering IOs 2019-08-12 15:31:10 +00:00
sehandle.h clang-format many files. 2018-09-18 15:41:22 -07:00
Utils.cpp Merge changes I40575081,I1ca8f8cf,I38bfd273 am: 1c6a56b27f 2019-04-09 03:57:24 -07:00
Utils.h vold: Introduce android::vold::writeStringToFile 2019-04-05 04:06:18 -07:00
vdc.cpp Add '/system/bin/vdc volume reset' command 2019-12-02 11:51:20 +00:00
vdc.rc Remove all references to FDE enable wipe 2017-12-22 11:17:15 -08:00
vold.rc vold: Grant root group 2018-08-08 17:08:02 -07:00
vold_prepare_subdirs.cpp Allow search permission on apex data directories. 2020-01-17 11:37:31 +00:00
VoldNativeService.cpp Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
VoldNativeService.h vold: Do not cache CE keys in vold 2020-01-24 00:20:22 +00:00
VoldUtil.cpp Move over to the C++ Fstab class 2019-01-31 12:34:39 -08:00
VoldUtil.h Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
VolumeManager.cpp Refactor: make cryptfs.h smaller 2020-02-07 11:16:12 -08:00
VolumeManager.h Remove storage sandboxes related code. 2019-05-09 17:48:04 -07:00
wait_for_keymaster.cpp add wait_for_keymaster 2018-05-09 12:59:18 -07:00
wait_for_keymaster.rc Add rc file for wait_for_keymaster 2018-05-15 16:15:21 -07:00