commit b1927c2a0a9b31d8a2365e90fd5460bc3527af39
author Barani Muthukumaran <quic_bmuthuku@quicinc.com> Thu Oct 31 22:59:34 2019 -0700
committer Paul Crowley <paulcrowley@google.com> Fri Jan 24 00:20:22 2020 +0000
tree 623214760a814cd3179d2d1dc7fa94e099b7c27a
parent aa038e2f4d4a6b276a712ee095bebacf08463d31

vold: Do not cache CE keys in vold

CE keys were cached in vold to support untrusted reset
by a device admin, this is now supported by Locksettingservice
using synthetic password. This change requires a secret to be
provided to retrieve the CE key and re-wrap without the secret
when user removes the credential.

Test: Set credential, remove credential, swipe to none
and vice-versa.
Bug: 26948053
Merged-In: I4cb1c035a472477e70c1ff5bf0b2c3fcfad495e5
Change-Id: I4cb1c035a472477e70c1ff5bf0b2c3fcfad495e5

VoldNativeService.h

diff --git a/VoldNativeService.h b/VoldNativeService.h
index 0718263..18551f2 100644
--- a/VoldNativeService.h
+++ b/VoldNativeService.h
@@ -112,6 +112,8 @@
 
     binder::Status addUserKeyAuth(int32_t userId, int32_t userSerial, const std::string& token,
                                   const std::string& secret);
+    binder::Status clearUserKeyAuth(int32_t userId, int32_t userSerial, const std::string& token,
+                                    const std::string& secret);
     binder::Status fixateNewestUserKeyAuth(int32_t userId);
 
     binder::Status unlockUserKey(int32_t userId, int32_t userSerial, const std::string& token,