Commit 7437c69f authored by Pruthvi Kurada's avatar Pruthvi Kurada Committed by Shrirang Bagul
Browse files

crypto: msm: multi partition ICE based encryption enhancement

BugLink: https://bugs.launchpad.net/bugs/1958420



Design enhancement for multi-partition inline crypto enginei(ICE)
based full disk encryption(FDE) solution where partition key mapper
is part of ice driver rather than qseecom driver and also new ioctl
to ice has been introduced which takes care of partition to
key slot mapping.

ioctl's added:
1. ICE_IOCTL_MAP_SLOT_PARTITION_NAME_REQ: Add an entry in mapper
table for the given partition name and its corresponding key slot
will be  allocated.
2. ICE_IOCTL_UMAP_SLOT_PARTITION_NAME_REQ: Remove the entry in mapper
table for the given partition name and its corresponding key slot
will be freed.
3. ICE_IOCTL_UPDATE_PWD: Update the entry in mapper table for the
given partitin name with the new password.

Test: All functional scenarios tested using sample client
1. Basic: create, wipe, update.
2. Negative Scenarios:
        a. Creating key twice for same partition
	b. Wiping key twice for same partition
	c. Update, reboot and then recreate key with old password.
	d. Update key with wrong current password etc.
3. Data getting encrypted or not after clearing cache and reboot.

Change-Id: I153614bfe01a7a072f23e21fcf925b8d796029fd
Signed-off-by: default avatarPruthvi Kurada <quic_pkurada@quicinc.com>
(cherry picked from commit 6aba569bb03ec2e087ef139745da64336c7011c3)
Signed-off-by: default avatarShrirang Bagul <shrirang.bagul@canonical.com>
parent 8d0667ea
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment