[roll] Roll fuchsia [NoRollback][fxfs] Switch journal mutation encryption to AES-256-XTS

Updates JournalRecord/Mutation serialization to version 57, packaging
mutations into a single encrypted blob with a prepended mutation count
and encrypting with AES-256-XTS. Removes periodic runtime metadata key
rolls, but still rolling on every mount.

This updates the Mutation and JournalRecord version as well since the
will actually contain the new format, though it is obscured through a
layer of encryption.

Adds a golden test to include a large mutation, as the handling of those
becomes a bit unique with encryption.

Original-Original-Bug: 449994313
NoRollback: Version increase. Once on a device, cannot be reverted.
Original-Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1766395
SLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com>
Original-Original-Revision: 9d9203334def82ac9c38b893a6bfa31b8666947c
GitOrigin-RevId: e7f5bcf1509fe567c3b56b5865a71073af8c2b92
Change-Id: I2172c0c1d3662ef4f8b8895bf1a76d32e4299c18
Reviewed-on: https://fuchsia-review.googlesource.com/c/integration/+/1815229
Cr-Commit-Position: refs/heads/main@{#201628}
1 file changed
tree: a898069d4efaad33aca92ce03d0f5d7b7d821a8b
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cobalt
  6. flower
  7. jiri.lock
  8. MILESTONE
  9. minimal
  10. prebuilts
  11. README.md
  12. stem
  13. test_durations
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.