unlock: dispatch via freemkv-unlock; delete in-tree handshake/css-auth/registry

Rewire the three unlock dispatch points through the freemkv-unlock crate via a
private `unlock_bridge`: drive-prep (kind=Unknown) at `Drive::init`, AACS cert
(kind=Aacs) at `do_handshake_cert`, CSS bus-auth (kind=Css) at scan. The bridge
news up `all_unlockers()` and runs the first matching one, mapping its
`Unlocked` result to the bus-key gate. After a successful drive unlock,
libfreemkv issues a generic SET CD SPEED (max) itself — the old per-unlocker
trait method is gone.

Delete the in-tree unlock code now owned by freemkv-unlock: the AACS cert
handshake (`aacs/handshake.rs`), the CSS bus-auth (`css/auth.rs`), and the
unlock registry (`unlock.rs`). Host-cert collection (a keysource concern) stays
in a small `aacs/host_certs.rs`. No public unlock surface remains — clients
touch libfreemkv only, oblivious to unlockers (as they are to SCSI). 2277 tests
pass.

This commit is contained in:

Matthew Jackson

2026-06-29 20:45:00 -07:00

parent 3bdb6f8b1a

commit 2ba6274eae

12 changed files with 264 additions and 3987 deletions

									
										src/aacs/mod.rs
									
		+1
		-1
	
												View File
												
				@@ -16,7 +16,7 @@

				pub mod boil;

				pub mod decrypt;

				pub mod handshake;

				pub mod host_certs;

				pub mod keys;

				pub mod provider;

				pub mod trace;