From 61e3ad9e228258bf75e4d9299c3df419594766e3 Mon Sep 17 00:00:00 2001
From: Daniel Micay
The update packages have a internal signature verified by the update client (or
- recovery image when sideloading). Downgrade attacks are also prevented, and downgrades
+ recovery when sideloading). Downgrade attacks are also prevented, and downgrades
cannot be done unless a special downgrade update package has been signed with the
release key. The internal payload for update_engine
is also signed,
providing another layer of signature verification and downgrade protection. Verified