commit 0e1b15ef6a4771963e89d46892206f246fc969c9
author Martin Kreichgauer <martinkr@google.com> Wed Jun 20 02:59:50 2018
committer Commit Bot <commit-bot@chromium.org> Wed Jun 20 02:59:50 2018
tree 50c912d1211d0fb3e9ff18efde040ce8a7ddd14a
parent 8af579d0b85fad15e57c38cae60fb25474cb27cd

//device/fido: implement the Touch ID credential metadata secret.

This moves the responsibility of generating the CredentialMetadata
'secret' parameter (formely profile_id) into the
AuthenticatorRequestDelegate. CredentialMetadata uses the parameter to
derive the HMAC and AEAD keys for encrypting/encoding credential
metadata before storing it in the macOS keychain.

For Chrome, implement profile-specific secrets by storing the value in
the browser profile PrefService. This guarantees that credentials will
be logically separated by user profile.

Bug: 678128
Change-Id: I8c3d12c6db266105eeb63191e9d277d8cdb173ee
Reviewed-on: https://chromium-review.googlesource.com/1102179
Commit-Queue: Martin Kreichgauer <martinkr@google.com>
Reviewed-by: Balazs Engedy <engedy@chromium.org>
Reviewed-by: John Abd-El-Malek <jam@chromium.org>
Reviewed-by: Dominic Battré <battre@chromium.org>
Cr-Commit-Position: refs/heads/master@{#568706}