diff options
| author | 2023-06-29 16:05:54 +0900 | |
|---|---|---|
| committer | 2023-08-09 17:33:34 +0900 | |
| commit | 8cbd940de917925266cb6f2086975a79ba4760ca (patch) | |
| tree | 58e6802425ff9faa29c2c919945d1b9483ec291a /api/api.go | |
| parent | a680cb9cf85b6873eb367a6a0eb054caf3f56916 (diff) | |
Insert DEFAULT_MGF1_DIGEST SHA-1 on MGF_DIGEST tag when ImportWrappedKey
SecureKeyImport is failed because of MGF_DIGEST tag mismatch.
wrapping key has MGF_DIGEST tag when generate or import key
but importWrappedKey logic does not have MGF_DIGEST tag on WrappedKeyEntry
So MGF_DIGEST tat mismatch error occur when decrypt wrapped key using wrapping key
Insert SHA-1 value on MGF_DIGEST tag because ImportWrappedKey should have spcified format
that keymint is compulsorily checking main digest SHA-256 and MGF digest SHA-1.
And MGF_DIGEST tag will add only wrappingkey has MGF_DIGEST value
in order not to affect keys generated prior to Android14.
Bug: 277853193
Test: android.keystore.cts.ImportWrappedKeyTest#testKeyStore_ImportWrappedKey
Change-Id: Id7229a763e3041ffbe73989a2bb24306b7beb7a5
Signed-off-by: Jaeyoon Lee <joyful.lee@samsung.corp-partner.google.com>
Diffstat (limited to 'api/api.go')
0 files changed, 0 insertions, 0 deletions