Results 86 comments of Nikolay Elenkov

As I said, Android M has official APIs for generating symmetric keys inside the keystore, so the hacks employed by this project are not really needed anymore. If you do...

@kevjava Looks good. However, note that this is a sample project, so it's missing a few things, namely ciphertext authentication (HMAC). CBC mode allows bit flipping without knowing the key,...

This is old, Python2 only code. If want to modify to support Python3, feel free to submit a PR.

If started the command `vdc cryptfs enablecrypto inplace ` you could initiate encryption with any password you chose. However, many vendor customize this process, and the timing the actual encryption...

Does it work if leave out -shared? Is the header the same format? It is possible that LG customized the backup logic, you may need to do some digging.

No sure, either it's an error, or they use a different compression algorithm.

Android 6.0 uses a plain string, so no need to convert to hex. You can check if the password is set correctly with `vdc cryptfs verifypw`. For OnePlus the password...

Thanks! That's interesting, could be a change in 6.0.1, as it works without the current password in 6.0. I'll checkout the latest AOSP source and confirm.

This seems to be a CM modification, the change is not in AOSP (as of android-6.0.1_r3).

I don't quite see why they need the `currentpw` parameter. I'll try to support it, but CM has been quite unstable for a while now, not sure if it's really...