diff options
| author | Daniel Micay <daniel.micay@grapheneos.org> | 2024-06-04 16:58:10 -0400 |
|---|---|---|
| committer | GrapheneOS <contact@grapheneos.org> | 2024-06-04 18:15:10 -0400 |
| commit | 8b18aaaaf63263e21a0b50da0c2b0330570000c0 (patch) | |
| tree | 558e58abfb0c336060185ca8dc99758e3fb55c71 /static | |
| parent | 94af51e894c7e18f8d3c3f1cc2c27a9711a3d4ac (diff) | |
improve extended wipe-without-reboot explanation
Diffstat (limited to 'static')
| -rw-r--r-- | static/releases.html | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/static/releases.html b/static/releases.html index 10281988..97876b6a 100644 --- a/static/releases.html +++ b/static/releases.html @@ -805,8 +805,7 @@ <ul> <li>full 2024-06-01 security patch level</li> - <li>extend the standard wipe-without-reboot implementation to run a secure element erase in addition to wiping the hardware keystore</li> - <li>extend the standard wipe-without-reboot implementation to wipe the encrypted disk encryption keys in addition to preventing deriving the key encryption keys used to encrypt them by wiping the hardware keystore</li> + <li>extend the standard wipe-without-reboot implementation beyond wiping the hardware keystores (which prevents recovering any OS data by preventing deriving the key encryption keys) by also wiping the secdiscardable data on the SSD needed to derive key encryption keys, the encrypted storage keys on the SSD and the Weaver slots in the secure element needed to derive per-user key encryption keys via a secure element erase</li> <li>kernel (5.10): update to latest GKI LTS branch revision</li> <li>kernel (5.15): update to latest GKI LTS branch revision</li> <li>kernel (6.1): update to latest GKI LTS branch revision</li> |