7ba7500953
fscrypt aosp doc: https://source.android.com/security/encryption/file-based kernel fscrypt doc: https://www.kernel.org/doc/html/v4.18/filesystems/fscrypt.html This commit implements the ability for TWRP to use fscrypt to decrypt files on the fscrypt implementation. It has been implemented mostly in a new successor library to e4crypt called libtwrpfscrypt. Most of the code was ported from AOSP vold. Notable updates include: - updated policy storage by libtar - lookup of fbe policies by libtwrpfscrypt - threaded keystore operations Big thanks to Dees_Troy for the initial trailblazing of encryption in TWRP. Change-Id: I69cd2eba3693a9914e00213d4943229635d0cdae
113 lines
4.3 KiB
Makefile
Executable File
113 lines
4.3 KiB
Makefile
Executable File
LOCAL_PATH := $(call my-dir)
|
|
ifeq ($(TW_INCLUDE_CRYPTO), true)
|
|
include $(CLEAR_VARS)
|
|
|
|
LOCAL_MODULE := libe4crypt
|
|
LOCAL_MODULE_TAGS := optional
|
|
LOCAL_CFLAGS :=
|
|
LOCAL_SRC_FILES := Decrypt.cpp ScryptParameters.cpp Utils.cpp HashPassword.cpp ext4_crypt.cpp
|
|
LOCAL_SHARED_LIBRARIES := libselinux libc libc++ libext4_utils libbase libcrypto libcutils libkeymaster_messages libhardware libprotobuf-cpp-lite
|
|
LOCAL_STATIC_LIBRARIES := libscrypt_static
|
|
LOCAL_C_INCLUDES := system/extras/ext4_utils \
|
|
system/extras/ext4_utils/include/ext4_utils \
|
|
external/scrypt/lib/crypto \
|
|
system/security/keystore/include \
|
|
hardware/libhardware/include/hardware \
|
|
system/security/softkeymaster/include/keymaster \
|
|
system/keymaster/include
|
|
|
|
ifneq ($(wildcard hardware/libhardware/include/hardware/keymaster0.h),)
|
|
LOCAL_CFLAGS += -DTW_CRYPTO_HAVE_KEYMASTERX
|
|
LOCAL_C_INCLUDES += external/boringssl/src/include
|
|
endif
|
|
ifeq ($(shell test $(PLATFORM_SDK_VERSION) -ge 26; echo $$?),0)
|
|
#8.0 or higher
|
|
LOCAL_CFLAGS += -DHAVE_GATEKEEPER1
|
|
ifeq ($(shell test $(PLATFORM_SDK_VERSION) -ge 29; echo $$?),0)
|
|
LOCAL_SHARED_LIBRARIES += android.hardware.confirmationui@1.0
|
|
endif
|
|
LOCAL_SHARED_LIBRARIES += android.hardware.keymaster@3.0 libkeystore_binder libhidlbase libutils libbinder android.hardware.gatekeeper@1.0
|
|
ifeq ($(shell test $(PLATFORM_SDK_VERSION) -ge 28; echo $$?),0)
|
|
#9.0 rules
|
|
LOCAL_CFLAGS += -DUSE_KEYSTORAGE_4 -Wno-unused-variable -Wno-sign-compare -Wno-unused-parameter -Wno-comment
|
|
LOCAL_SRC_FILES += Ext4CryptPie.cpp Keymaster4.cpp KeyStorage4.cpp KeyUtil.cpp MetadataCrypt.cpp KeyBuffer.cpp
|
|
LOCAL_SHARED_LIBRARIES += android.hardware.keymaster@4.0 libkeymaster4support
|
|
LOCAL_SHARED_LIBRARIES += android.hardware.gatekeeper@1.0 libkeystore_parcelables libkeystore_aidl
|
|
LOCAL_CFLAGS += -DHAVE_SYNTH_PWD_SUPPORT
|
|
LOCAL_SRC_FILES += Weaver1.cpp
|
|
LOCAL_SHARED_LIBRARIES += android.hardware.weaver@1.0
|
|
LOCAL_CFLAGS += -DHAVE_LIBKEYUTILS
|
|
LOCAL_SHARED_LIBRARIES += libkeyutils
|
|
else
|
|
#8.0 rules
|
|
LOCAL_CFLAGS += -DUSE_KEYSTORAGE_3
|
|
LOCAL_SRC_FILES += Ext4Crypt.cpp Keymaster3.cpp KeyStorage3.cpp
|
|
ifneq ($(wildcard hardware/interfaces/weaver/Android.bp),)
|
|
#only present in some 8.0 trees and should be in all 8.1 trees
|
|
LOCAL_CFLAGS += -DHAVE_SYNTH_PWD_SUPPORT
|
|
LOCAL_SRC_FILES += Weaver1.cpp
|
|
LOCAL_SHARED_LIBRARIES += android.hardware.weaver@1.0
|
|
endif
|
|
ifneq ($(wildcard system/core/libkeyutils/Android.bp),)
|
|
#only present in some 8.0 trees and should be in all 8.1 trees
|
|
LOCAL_CFLAGS += -DHAVE_LIBKEYUTILS
|
|
LOCAL_SHARED_LIBRARIES += libkeyutils
|
|
endif
|
|
endif
|
|
ifeq ($(shell test $(PLATFORM_SDK_VERSION) -ge 28; echo $$?),0)
|
|
LOCAL_REQUIRED_MODULES := keystore_auth
|
|
else
|
|
LOCAL_ADDITIONAL_DEPENDENCIES := keystore_auth
|
|
endif
|
|
else
|
|
#7.x rules
|
|
LOCAL_SRC_FILES += Ext4Crypt.cpp Keymaster.cpp KeyStorage.cpp
|
|
endif
|
|
ifeq ($(shell test $(PLATFORM_SDK_VERSION) -lt 28; echo $$?),0)
|
|
LOCAL_SHARED_LIBRARIES += libsoftkeymaster
|
|
endif
|
|
|
|
include $(BUILD_SHARED_LIBRARY)
|
|
|
|
|
|
|
|
include $(CLEAR_VARS)
|
|
LOCAL_MODULE := twrpfbe
|
|
LOCAL_MODULE_TAGS := optional
|
|
LOCAL_MODULE_CLASS := RECOVERY_EXECUTABLES
|
|
LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT)/sbin
|
|
LOCAL_SRC_FILES := main.cpp
|
|
LOCAL_SHARED_LIBRARIES := libe4crypt
|
|
#LOCAL_LDFLAGS += -Wl,-dynamic-linker,/sbin/linker64
|
|
|
|
include $(BUILD_EXECUTABLE)
|
|
|
|
include $(CLEAR_VARS)
|
|
LOCAL_MODULE := e4policyget
|
|
LOCAL_MODULE_TAGS := optional
|
|
LOCAL_MODULE_CLASS := RECOVERY_EXECUTABLES
|
|
LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT)/sbin
|
|
LOCAL_SRC_FILES := e4policyget.cpp
|
|
LOCAL_SHARED_LIBRARIES := libe4crypt
|
|
LOCAL_LDFLAGS += -Wl,-dynamic-linker,/sbin/linker64
|
|
|
|
include $(BUILD_EXECUTABLE)
|
|
|
|
include $(CLEAR_VARS)
|
|
LOCAL_MODULE := keystore_auth
|
|
LOCAL_MODULE_TAGS := optional
|
|
LOCAL_MODULE_CLASS := RECOVERY_EXECUTABLES
|
|
LOCAL_MODULE_PATH := $(TARGET_RECOVERY_ROOT_OUT)/sbin
|
|
LOCAL_SRC_FILES := keystore_auth.cpp
|
|
LOCAL_SHARED_LIBRARIES := libc libkeystore_binder libutils libbinder liblog
|
|
ifeq ($(shell test $(PLATFORM_SDK_VERSION) -ge 28; echo $$?),0)
|
|
#9.0
|
|
LOCAL_CFLAGS += -DUSE_SECURITY_NAMESPACE
|
|
LOCAL_SHARED_LIBRARIES += libkeystore_aidl
|
|
endif
|
|
LOCAL_LDFLAGS += -Wl,-dynamic-linker,/sbin/linker64
|
|
|
|
include $(BUILD_EXECUTABLE)
|
|
|
|
endif
|