cryptfs_hw: Use HW keymaster for FDE keys

Use hardware keymsater for hardware FDE keys to increase the
key complexity to avoid attacks.

Change-Id: If4c1b84796b2f01331a3ef3f93c3a7af8af00f29

1 files changed, 2 insertions, 9 deletions

diff --git a/cryptfs_hw.c b/cryptfs_hw.c
index 15c939d..576033c 100755
--- a/cryptfs_hw.c
+++ b/cryptfs_hw.c
@@ -431,15 +431,8 @@ static int get_keymaster_version()
 
 int should_use_keymaster()
 {
-    /* HW FDE key would be tied to keymaster only if:
-     * New Keymaster is available
-     * keymaster partition exists on the device
+    /*
+     * HW FDE key should be tied to keymaster
      */
-    int rc = 0;
-    if (get_keymaster_version() != KEYMASTER_MODULE_API_VERSION_1_0) {
-        SLOGI("Keymaster version is not 1.0");
-        return rc;
-    }
-
     return 1;
 }