commit 9ad51adeb987ed0d3260267075fcfe6925de654a
author Barani Muthukumaran <quic_bmuthuku@quicinc.com> Thu Oct 31 22:59:34 2019 -0700
committer Paul Crowley <paulcrowley@google.com> Thu Jan 16 12:16:25 2020 -0800
tree 154750b7bf9ebb96dc68a3f429725b9dee2f88fa
parent e3102990ca50ea1711653fbca15e9c6ff5e5cf3e

vold: Do not cache CE keys in vold

CE keys were cached in vold to support untrusted reset
by a device admin, this is now supported by Locksettingservice
using synthetic password. This change requires a secret to be
provided to retrieve the CE key and re-wrap without the secret
when user removes the credential.

Test: Set credential, remove credential, swipe to none
and vice-versa.
Bug: 26948053
Change-Id: I4cb1c035a472477e70c1ff5bf0b2c3fcfad495e5

binder/android/os/IVold.aidl

diff --git a/binder/android/os/IVold.aidl b/binder/android/os/IVold.aidl
index cec38c5..e7a44bc 100644
--- a/binder/android/os/IVold.aidl
+++ b/binder/android/os/IVold.aidl
@@ -92,6 +92,8 @@
 
     void addUserKeyAuth(int userId, int userSerial, @utf8InCpp String token,
                         @utf8InCpp String secret);
+    void clearUserKeyAuth(int userId, int userSerial, @utf8InCpp String token,
+                        @utf8InCpp String secret);
     void fixateNewestUserKeyAuth(int userId);
 
     void unlockUserKey(int userId, int userSerial, @utf8InCpp String token,