commit 5d33c4652a54aea53029b16db3d4cc4e632f841a
author Tianjie <xunchang@google.com> Tue Dec 15 15:46:27 2020 -0800
committer Tianjie <xunchang@google.com> Tue Jan 12 19:24:08 2021 -0800
tree b33b966ccf782b085d6592f03da767bffec22c5b
parent a8cc70b502d78d427bce1eb55ee05f132526a879

Load and generate key from keystore in reboot escrow

According to the design, we need to wrap both reboot escrow key
and reboot escrow data with an additional key from android
keystore. The new key in keystore is created upon a new resume on
reboot request, and cleared after decryption is attempted at boot
time.

Bug: 172780686
Test: atest FrameworksServicesTests:RebootEscrowDataTest \
            FrameworksServicesTests:LockSettingsServiceTests \
            FrameworksServicesTests:RecoverySystemServiceTest \
            FrameworksServicesTests:RebootEscrowManagerTests

Change-Id: Ie2b5f559fb5d3217337e31b0dff507b98715384d