diff options
| author | Rubin Xu <rubinxu@google.com> | 2017-10-31 15:40:32 +0000 |
|---|---|---|
| committer | Paul Crowley <paulcrowley@google.com> | 2017-11-03 22:40:56 +0000 |
| commit | 8c52865a61e3d01c821d884b9814d70a72272bf1 (patch) | |
| tree | d398f078ed84459fad6cb03c7f422028c0abc514 /tools/aapt2/java/JavaClassGenerator.cpp | |
| parent | 680130d1be3c507c541ab39c1ec6c17b5bf1a765 (diff) | |
Swap the order of synthetic password wrapping
Synthetic password is double encrypted by both a random auth-bound keymaster
key and a secret derived from user password. In order to avoid a password
verification oracle without rate limiting, synthetic password needs to be
encrypted by the derived secret first, and then the auth-bound key. This
change corrects the order of encryptions, as well as adds an upgrade path to
refresh existing credentials.
Test: Running an old build with existing password, flash to new build,
verify the device unlocks successfully.
Bug: 68694819
Change-Id: Ifdaa01f3f4ddd5bb3f3d808d38f440ced729034f
Diffstat (limited to 'tools/aapt2/java/JavaClassGenerator.cpp')
0 files changed, 0 insertions, 0 deletions