3 Commits (972c545f7e4ad7baad0ea2bae4d142d62913c1fc)

Author	SHA1	Message	Date
Paul Crowley	0572080814	Password security for FBE disk encryption keys ... Added a new call change_user_key which changes the way that disk encryption keys are protected; a key can now be protected with a combination of an auth token and a secret which is a hashed password. Both of these are passed to unlock_user_key. This change introduces a security bug, b/26948053, which must be fixed before we ship. Bug: 22950892 Change-Id: Iac1e45bb6f86f2af5c472c70a0fe3228b02115bf	9 years ago
Paul Crowley	13ffd8ef7a	Improvements to the key storage module ... The key storage module didn't comply with Android coding standards and had room for improvemnet in a few other ways, so have cleaned up. Change-Id: I260ccff316423169cf887e538113b5ea400892f2	9 years ago
Paul Crowley	1ef255816c	Use a keymaster-based key storage module ... Instead of writing raw keys, encrypt the keys with keymaster. This paves the way to protecting them with auth tokens and passwords later. In addition, fold in the hash of a 16k file into their encryption, to ensure secure deletion works properly. Now even C++ier! Bug: 22502684 Bug: 22950892 Change-Id: If70f139e342373533c42d5a298444b8438428322	9 years ago