Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 3a0f9cde authored by Miguel Aranda's avatar Miguel Aranda
Browse files

Clarify text about encryption of PKCS#12 blobs in CredstoreIdentityCredential. 

Change-Id: I973894c8c2534846028d0abdffeec9e830864295
parent 3dc09e3e

identity/java/android/security/identity/CredstoreIdentityCredential.java

+1 −2
Original line number Diff line number Diff line
@@ -91,8 +91,7 @@ class CredstoreIdentityCredential extends IdentityCredential { 
            // The main reason for this convoluted approach and not just sending the decomposed

            // key-pair is that this would require directly using (device-side) BouncyCastle which

            // is tricky due to various API hiding efforts. So instead we have credstore generate

            // this PKCS#12 blob. The blob is encrypted with no password (sadly, also, BoringSSL

            // doesn't support not using encryption when building a PKCS#12 blob).

            // this PKCS#12 blob. The blob is unencrypted.

            //

            byte[] pkcs12 = mBinder.createEphemeralKeyPair();

            String alias = "ephemeralKey";