crypto: msm: multi partition ICE based encryption enhancement
BugLink: https://bugs.launchpad.net/bugs/1958420 Design enhancement for multi-partition inline crypto enginei(ICE) based full disk encryption(FDE) solution where partition key mapper is part of ice driver rather than qseecom driver and also new ioctl to ice has been introduced which takes care of partition to key slot mapping. ioctl's added: 1. ICE_IOCTL_MAP_SLOT_PARTITION_NAME_REQ: Add an entry in mapper table for the given partition name and its corresponding key slot will be allocated. 2. ICE_IOCTL_UMAP_SLOT_PARTITION_NAME_REQ: Remove the entry in mapper table for the given partition name and its corresponding key slot will be freed. 3. ICE_IOCTL_UPDATE_PWD: Update the entry in mapper table for the given partitin name with the new password. Test: All functional scenarios tested using sample client 1. Basic: create, wipe, update. 2. Negative Scenarios: a. Creating key twice for same partition b. Wiping key twice for same partition c. Update, reboot and then recreate key with old password. d. Update key with wrong current password etc. 3. Data getting encrypted or not after clearing cache and reboot. Change-Id: I153614bfe01a7a072f23e21fcf925b8d796029fd Signed-off-by:Pruthvi Kurada <quic_pkurada@quicinc.com> (cherry picked from commit 6aba569bb03ec2e087ef139745da64336c7011c3) Signed-off-by:
Shrirang Bagul <shrirang.bagul@canonical.com>
Loading
Please sign in to comment