Clarify the Weaver documentation

- Explicitly mention that Weaver is for *persistent* storage
- Explicitly mention secure deletion requirement

Change-Id: I3eaf7408570ff20c69a21398e39e16be97d2a917
(cherry picked from commit acd066c614)
Merged-In: I3eaf7408570ff20c69a21398e39e16be97d2a917
This commit is contained in:
Eric Biggers
2023-05-17 17:48:30 +00:00
parent 316cf58d49
commit a4742a0291

View File

@@ -20,8 +20,8 @@ import android.hardware.weaver.WeaverConfig;
import android.hardware.weaver.WeaverReadResponse;
/**
* Weaver provides secure storage of secret values that may only be read if the
* corresponding key has been presented.
* Weaver provides secure persistent storage of secret values that may only be
* read if the corresponding key has been presented.
*
* The storage must be secure as the device's user authentication and encryption
* relies on the security of these values. The cardinality of the domains of the
@@ -76,7 +76,8 @@ interface IWeaver {
WeaverReadResponse read(in int slotId, in byte[] key);
/**
* Overwrites the identified slot with the provided key and value.
* Overwrites the identified slot with the provided key and value, rendering
* the previous contents of the slot permanently unrecoverable.
*
* The new values are written regardless of the current state of the slot in
* order to remain idempotent.