Add wrapped key support for metadata encryption
Change metadata_cipher fstab option to metadata_encryption that includes encryption flags in addition to the cipher. wrappedkey_v0 encryption flag is used to denote that the inline encryption hardware supports wrapped keys. dm-default-key device is created and a wrappedkey is provided along with the optional wrappedkey_v0 argument. Bug: 147733587 Test: FBE validation with Fscrypt v2 + inline crypt + wrapped key changes kernel and metadata encryption with wrapped key. Change-Id: Id1a18db175680dd6b0adb4594d06566eb1285785
Loading
Please register or sign in to comment