From a2991f9b12f74efd7829c8edc5398c990c446b40 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Sat, 1 Jun 2024 01:49:19 -0400
Subject: [PATCH] clarify why wiping hardware keystores works

---
 static/releases.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/static/releases.html b/static/releases.html
index 08b47cf4..945f29ff 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -775,7 +775,7 @@
                     <p>Changes since the 2024052100 release:</p>
 
                     <ul>
-                        <li>add support for setting a duress password and PIN for quickly wiping all hardware keystore keys to make all OS data unrecoverable followed by wiping eSIMs and then shutting down</li>
+                        <li>add support for setting a duress password and PIN for quickly wiping all hardware keystore keys including keys used as part of deriving the key encryption keys for disk encryption to make all OS data unrecoverable followed by wiping eSIMs and then shutting down</li>
                         <li>disable unused adoptable storage support since it would complicate duress password support (support can be added if we ever support a device able to use it)</li>
                         <li>increase default max password length to 128 to improve support for strong diceware passphrases, which will become more practical for people who don't want biometric-only secondary unlock with our upcoming 2-factor fingerprint unlock feature</li>
                         <li>disable camera lockscreen shortcut functionality when camera access while locked is disabled to avoid the possibility of misconfiguration by adding the camera lockscreen shortcut and then forgetting to remove it when disabling camera access</li>