Evolution-x/hardware_interfaces
1
0
Fork 0
mirror of https://github.com/Evolution-X/hardware_interfaces synced 2026-02-01 11:36:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove reference to factory reset of K

Browse Source 
The ISharedSecret.aidl description of the pre-shared secret K
mentioned that K was set up during factory reset.  While that could be
done, it is almost never done; most OEMs inject K in the factory.
Removed the reference to setup in factory reset to reduce confusion.

Test: N/A, comment-only change
Change-Id: Idbbd5a8d64197ef4713a75075a9730d06162ad05
This commit is contained in:
Shawn Willden
2023-03-22 07:59:46 -06:00
parent f814c97702
commit deaa5dd808
1 changed files with 3 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
security/sharedsecret/aidl/android/hardware/security/sharedsecret/ISharedSecret.aidl
View File

@@ -81,14 +81,9 @@ interface ISharedSecret {
* defined in the standard. The counter is prefixed and length L appended, as shown
* in the construction on page 12 of the standard. The label string is UTF-8 encoded.
*
* ``K'' is a pre-established shared secret, set up during factory reset. The mechanism for
* establishing this shared secret is implementation-defined.Any method of securely
* establishing K that ensures that an attacker cannot obtain or derive its value is
* acceptable.
*
* CRITICAL SECURITY REQUIREMENT: All keys created by a IKeymintDevice instance must
* be cryptographically bound to the value of K, such that establishing a new K
* permanently destroys them.
* ``K'' is a pre-established shared secret. The mechanism for establishing this shared
* secret is implementation-defined. Any method of securely establishing K that
* ensures that an attacker cannot obtain or derive its value is acceptable.
*
* ``||'' represents concatenation.
*