From d0559bfa3c31023ed2f2aa3807b6a0a1da9a6feb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20G=C3=B6ttgens?= <tgoettgens@gmail.com>
Date: Wed, 19 Oct 2022 11:28:30 +0200
Subject: [PATCH] add capability to switch out the public default key for OEMs
 (#216)

---
 deviceonly.options | 4 ++--
 deviceonly.proto   | 5 +++++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/deviceonly.options b/deviceonly.options
index 1905649..fe51ce9 100644
--- a/deviceonly.options
+++ b/deviceonly.options
@@ -10,5 +10,5 @@
 *ChannelFile.channels max_count:8
 
 *OEMStore.oem_text max_size:40
-
-*OEMStore.oem_icon_bits max_size:2048
\ No newline at end of file
+*OEMStore.oem_icon_bits max_size:2048
+*OEMStore.oem_aes_key max_size:32
diff --git a/deviceonly.proto b/deviceonly.proto
index d7284e2..b4e0c1d 100644
--- a/deviceonly.proto
+++ b/deviceonly.proto
@@ -134,4 +134,9 @@ message OEMStore {
    * Use this font for the OEM text.
    */
   string oem_text = 5;
+
+  /*
+   * The default device encryption key, 16 or 32 byte
+   */
+  bytes oem_aes_key = 6;
 }