Emerick Rogul
b1596e3db8
Chromium changes: https://chromium.googlesource.com/chromium/src/+/0fdbaef65b9ade5730c98d5af4fe57ece28f3341 commit 0fdbaef65b9ade5730c98d5af4fe57ece28f3341 Author: Will Harris <wfh@chromium.org> Date: Fri Mar 13 10:35:06 2026 -0700 Add new app-bound validation type for isolated data Data encrypted by a process running isolated cannot be decrypted by a process not running isolated. However, isolated processes can decrypt data from both isolated or unisolated processes, which enables data security upgrade scenarios for when a process becomes isolated. SetIsolationState is extended to re-encrypt data to an unisolated state if downgrading protection. This ensures the data remains accessible when running unisolated. To achieve this, App-Bound takes an option to force a re-encrypt to a particular protection level, and this is also exposed via the App-Bound key provider. Tests are added for all of this new behavior. BUG=433545123 Change-Id: Ibff7119ec151f5ef11a7d5091b5360709db787ee Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7644512 Commit-Queue: Will Harris <wfh@chromium.org> Reviewed-by: Greg Thompson <grt@chromium.org> Cr-Commit-Position: refs/heads/main@{#1599157}