Certain vendor kernel modules were previously stored in the vendor
partition. With this change, we create a new separate partition named
vendor_dlkm for these vendor modules.
Bug: 173653839
Change-Id: I6e3b20ada58ffea05de3df8e7eae9fc59a6019e0
Make better use of the new hardware by using wrapped keys via the KDN
(Key Distribution Network), rather than standard keys. Wrapped keys are
slightly better protected against being compromised.
When this change is submitted, a factory reset will be required.
Bug: 149360056
Test: Booted Android and verified via the kernel log and
'dmctl table userdata' that both FBE and metadata encryption are
using wrapped keys. Also ran vts_kernel_encryption_test.
Also storage-qa and reboot stress testing (b/178650615).
Change-Id: Iab6f4199306de02b5846062e7499783b7aedf901