build This is a merge of CL from widevine repo (obfuscated code only): https://widevine-internal-review.googlesource.com/c/cdm/+/124885 The source code change that produced the obfucated code is also included in the CL above but will not be merged to Android. Original commit message from the fix above: "This is a security improvement against an L3 exploit b/182584472. The change is to store RSA private key in two parts instead of one, and load it separately when the key is needed. This will make it more difficult to find the entire RSA key. This CL does the key loading part only. Key splitting is done in Haystack in CL: cl/367515385" New L3 system IDs included in the obfuscated code: ID Description 22585 Android Q ARM L3 Field Provisioning 3.0 22586 Android Q ARM 64 L3 Field Provisioning 3.0 22587 Android Q x86 L3 Field Provisioning 3.0 22588 Android Q x86 64 L3 Field Provisioning 3.0 Bug: 182584472 Test: L3 unit tests Test: GTS tests run gts --module GtsMediaTestCases run gts --module GtsExoPlayerTestCases run gts --module GtsYouTubeTestCases Change-Id: I834d3802690c2fda75cb3cfba186c41b6f5dc749
The libwvlevel3.a static libraries under the different platforms were made with OEMCertificates with the following SYSTEM_IDs:
arm: 8158 arm64: 8159 mips: 8160 mips64: 8161 x86: 8162 x86_64: 8163