am 216d18b9: Merge "Remove IV auto-generation workaround."
* commit '216d18b997eb929c2c3af9b2102595f4ec694c20': Remove IV auto-generation workaround.
This commit is contained in:
@@ -547,18 +547,12 @@ public abstract class KeyStoreCipherSpi extends CipherSpi implements KeyStoreCry
|
||||
if (mIvRequired) {
|
||||
// IV is needed
|
||||
if ((mIv == null) && (mEncrypting)) {
|
||||
// TODO: Switch to keymaster-generated IV code below once keymaster supports
|
||||
// that.
|
||||
// IV is needed but was not provided by the caller -- generate an IV.
|
||||
mIv = new byte[mBlockSizeBytes];
|
||||
SecureRandom rng = (mRng != null) ? mRng : new SecureRandom();
|
||||
rng.nextBytes(mIv);
|
||||
// // IV was not provided by the caller and thus will be generated by keymaster.
|
||||
// // Mix in some additional entropy from the provided SecureRandom.
|
||||
// if (mRng != null) {
|
||||
// mAdditionalEntropyForBegin = new byte[mBlockSizeBytes];
|
||||
// mRng.nextBytes(mAdditionalEntropyForBegin);
|
||||
// }
|
||||
// IV was not provided by the caller and thus will be generated by keymaster.
|
||||
// Mix in some additional entropy from the provided SecureRandom.
|
||||
if (mRng != null) {
|
||||
mAdditionalEntropyForBegin = new byte[mBlockSizeBytes];
|
||||
mRng.nextBytes(mAdditionalEntropyForBegin);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user