Eric Biggers c27e9e5ff9 gs101: use wrapped keys for storage encryption
Make better use of the new hardware by using wrapped keys via the KDN
(Key Distribution Network), rather than standard keys.  Wrapped keys are
slightly better protected against being compromised.

When this change is submitted, a factory reset will be required.

Bug: 149360056
Test: Booted Android and verified via the kernel log and
      'dmctl table userdata' that both FBE and metadata encryption are
      using wrapped keys.  Also ran vts_kernel_encryption_test.
      Also storage-qa and reboot stress testing (b/178650615).
Change-Id: Iab6f4199306de02b5846062e7499783b7aedf901
2021-03-08 21:23:20 +00:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
2021-03-06 16:31:12 +08:00
Description
No description provided
494 MiB
Languages
C++ 69.9%
Makefile 28.1%
Java 2%