Delete the bespoke security/keystore module introduced by the parent
revision and route per-database obfsvfs keys through security/lockstore
using KekType::LocalKey. The lockstore collection name for each SQLite
database is the SHA-256 of the database's path relative to the active
profile directory; the underlying DEK is created extractable so that
obfsvfs can consume the raw 32-byte key via the `?key=...` URI.
- New storage/SQLiteEncryption.{h,cpp} exposes
mozilla::storage::GetEncryptionKey and ShutdownEncryptionKeystore
on top of lockstore_ffi.
- Three consumers rewired: mozStorageService::Init drops the explicit
key::Init() call; mozStorageService::Observe(xpcom-shutdown-threads)
calls ShutdownEncryptionKeystore(); mozStorageConnection and
toolkit/components/places/Database.cpp call GetEncryptionKey.
- security/keystore/ deleted and dropped from security/moz.build.
- Browser-chrome tests moved to storage/test/browser/encryption/ with
the keystore.db existence assertion removed (lockstore manages its
own DB).
Differential Revision: https://phabricator.services.mozilla.com/D301076
Benjamin Beurdouche
7bb44f99f5