build This is a merge of CL from widevine repo (obfuscated code only): https://widevine-internal-review.googlesource.com/c/cdm/+/124965 The source code change that produced the obfucated code is here: https://widevine-internal-review.googlesource.com/c/cdm/+/121763 Original commit message from the fix above: "This is a security improvement against an L3 exploit b/182584472. The change is to store RSA private key in two parts instead of one, and load it separately when the key is needed. This will make it more difficult to find the entire RSA key. This CL does the key loading part only. Key splitting is done in Haystack in CL: cl/367515385" New L3 system IDs included in the obfuscated code: ID Description 22593 Android S ARM L3 Field Provisioning 3.0 22594 Android S ARM 64 L3 Field Provisioning 3.0 22595 Android S x86 L3 Field Provisioning 3.0 22596 Android S x86 64 L3 Field Provisioning 3.0 Bug: 182584472 Test: L3 unit tests Test: GTS tests https://android-build.googleplex.com/builds/forrest/run/L16300000887061939 The only failed case is a test issue due to the new IDs not being added to the allow list of the test yet. This test passed on local run with the updated allow list. Change-Id: If8b8b2cb9291ede0cb2dcc892f5557c3a68c4b96
The libwvlevel3.a static libraries under the different platforms were made with OEMCertificates with the following SYSTEM_IDs:
arm: 8158 arm64: 8159 mips: 8160 mips64: 8161 x86: 8162 x86_64: 8163