Not to set DKEK value to DEK struct salt attribute

DEK struct salt value is derived from DKEK. It's not
clear to be stored on multiple data which is security-sensitive.

Change-Id: Ie3684e350d12dce132cb9425de3b075e25dbb63e
Signed-off-by: Kyungwook Tak <k.tak@samsung.com>

diff --git a/src/manager/service/key-provider.cpp b/src/manager/service/key-provider.cpp
index eddc472..7abba87 100644 (file)
--- a/src/manager/service/key-provider.cpp
+++ b/src/manager/service/key-provider.cpp
@@ -343,7 +343,6 @@ RawBuffer KeyProvider::generateDEK(const std::string &smackLabel)
         ThrowErr(Exc::InternalError, "GenerateDEK Failed in KeyProvider::generateDEK");
 
     wkmcDEK.setKeyInfoKeyLength((unsigned int)wrappedKeyLength);
-    wkmcDEK.setKeyInfoSalt(m_kmcDKEK->getKeyAndInfo().key, MAX_SALT_SIZE);
     wkmcDEK.setKeyInfoLabel(resized_smackLabel);
 
     LogDebug("GenerateDEK Success");