commit 2907c15eb6836f1cf38eaad4d8bccfb85455936f
author Cody Kesting <ckesting@google.com> Fri Oct 11 11:40:59 2019 -0700
committer Cody Kesting <ckesting@google.com> Fri Oct 11 12:31:37 2019 -0700
tree 514552fd445d38081ae15ed0b58156bef49b6cc6
parent 48062ed59d80cd615d5e9c9edb1c362676439517

Log EAP-SIM/AKA auth challenge as PII.

When EAP-SIM/AKA authentication on the UICC fails
(TelephonyManager#getIccAuthentication returns null), the formatted
challenge is logged. However, this information needs to be logged as
PII, since it contains the authentication vector.

Bug: 142554244
Test: atest FrameworksIkeTests
Change-Id: Ibc662c6c47445b9ebff0bc792120ec7a9d83f266

src/java/com/android/ike/eap/statemachine/EapSimAkaMethodStateMachine.java

diff --git a/src/java/com/android/ike/eap/statemachine/EapSimAkaMethodStateMachine.java b/src/java/com/android/ike/eap/statemachine/EapSimAkaMethodStateMachine.java
index 2bea5ad..e792033 100644
--- a/src/java/com/android/ike/eap/statemachine/EapSimAkaMethodStateMachine.java
+++ b/src/java/com/android/ike/eap/statemachine/EapSimAkaMethodStateMachine.java
@@ -181,8 +181,7 @@
                         base64Challenge);
 
         if (base64Response == null) {
-            String msg = "UICC authentication failed. Input: "
-                    + Log.byteArrayToHexString(formattedChallenge);
+            String msg = "UICC authentication failed. Input: " + LOG.pii(formattedChallenge);
             LOG.e(tag, msg);
             throw new EapSimAkaAuthenticationFailureException(msg);
         }