commit | 3aa914d4a9f08f60999c7188427c2f02cc807962 | [log] [tgz] |
---|---|---|
author | Paul Crowley <[email protected]> | Mon Oct 09 16:35:51 2017 -0700 |
committer | Paul Crowley <[email protected]> | Tue Oct 24 15:27:04 2017 -0700 |
tree | 04d2f14cc654f64142b69d753aa60b5ffffec96b | |
parent | 82b41ff837a6279c958f6d48aced63f0805b443a [diff] |
Give SD cards their own keys and modes. When we set up encryption on real volumes - not just /data - we should give them their own keys, so that these keys can be deleted when the volume is forgotten. Also, we must choose the encryption modes differently, since ICE encryption which works on /data may not work on such volumes. Bug: 25861755 Test: boot device, add SD card, check modes. Change-Id: I354cd651757c3566dba046ae99d324833ad9b0e5