Commit graph

7 commits

Author SHA1 Message Date
Nathan Huckleberry
d4aea9089b Enable HCTR2 for filenames encryption
Fix prefix-correlation weakness in filenames encryption by switching to
AES-256-HCTR2.  Enabling HCTR2 fixes a longstanding known weakness in
filenames encryption.

Also enable HCTR2 for adoptable storage.  Pixel phones don't have an SD
card slot.  So they can only have adoptable storage through the "Virtual
SD Card", which is for testing only.

Bug: 265046004
Test: Equivalent changes were tested on P21 since I don't have a P23.
Will be tested with storage-qa.

Change-Id: I0666eb07c4b93b1bab4da41e3b4f5019ac38c213
2023-02-18 02:03:15 +00:00
Jaegeuk Kim
613c3a39a8 zuma: add no encryption fstab rule
Change-Id: I573d47c9df408ec9ba22d98474a21ef635fd3fbf
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
2023-01-12 09:41:15 -08:00
Jaegeuk Kim
be913ec40e Enable HW encryption w/ Trusty
Bug: 214136017
Bug: 214135924
Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: Id38edc06ad58de8eefee7619077ddd753d9804cb
2022-08-31 21:48:44 -07:00
Kenny Root
4e34e0ac28 fstab: add back inlinecrypt for hw encryption
Without this flag, fscrypt will return error for any filesystem operation involving
the partitions mounted with the fileencryption=::inlinecrypt_optimized flag.

Bug: 241606997
Test: enable KDN, switch to :gen_fstab.foo-hw-encrypt
Signed-off-by: Kenny Root <kroot@google.com>
Change-Id: I9601fcdfa627df4e67f1586cd32ceef3c1f9ecac
2022-08-08 16:49:08 -07:00
Jaegeuk Kim
776a3b6586 Use SW-based FBE
Should jump to use HW encryption

Signed-off-by: Jaegeuk Kim <jaegeuk@google.com>
Change-Id: I1e9f5f26d7ba368adf20aa9bd0b1345a932a2d27
2022-06-30 17:29:17 -07:00
Aaron Ding
66befd88e3 Create device Ripcurrent on Zuma platform
s/cloudripper/ripcurrent
s/gs201/zuma
s/pantah/ripcurrent

Bug: 229340586
Change-Id: Ic5dffbbfadbb1eb8479587b95222801426bba35e
Signed-off-by: Aaron Ding <aaronding@google.com>
2022-04-19 12:55:56 +08:00
Aaron Ding
d88f9a90bd Branch zuma from gs201
Branch zuma from gs201 sha1 9009acf5c217f553b45ea82aa0702607229f0347

cp/pantah/ripcurrent
cp/gs201/zuma

Bug: 229340586
Change-Id: Ia312c20dae892ead9bf06728b4ef5c0c260ad045
Signed-off-by: Aaron Ding <aaronding@google.com>
2022-04-19 12:45:55 +08:00