Seedless controller: store keyring encryption key instead of password

packages/seedless-onboarding-controller/CHANGELOG.md

@@ -18,6 +18,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Added a check for `duplicate data` before adding it to the metadata store. ([#5955](https://github.com/MetaMask/core/pull/5955))
   - renamed `getSeedPhraseBackupHash` to `getSecretDataBackupState` and added optional param (`type`) to look for data with specific type in the controller backup state.
   - updated `updateBackupMetadataState` method param with `{ keyringId?: string; data: Uint8Array; type: SecretType }`. Previously , `{ keyringId: string; seedPhrase: Uint8Array }`.
+- Added `submitGlobalPassword`. ([#5995](https://github.com/MetaMask/core/pull/5995))
+- Added `storeKeyringEncryptionKey` and `loadKeyringEncryptionKey`. ([#5995](https://github.com/MetaMask/core/pull/5995))
 
 ### Changed
 
@@ -27,6 +29,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - check for token expired in toprf call, refresh token and retry if expired
   - `submitPassword` revoke refresh token and replace with new one after password submit to prevent malicious use if refresh token leak in persisted state
 - Removed `recoveryRatelimitCache` from the controller state. ([#5976](https://github.com/MetaMask/core/pull/5976)).
+- **BREAKING:** Changed `syncLatestGlobalPassword`. ([#5995](https://github.com/MetaMask/core/pull/5995))
+  - removed parameter `oldPassword`
+  - no longer verifying old password
+  - explicitly requring unlocked controller
+
+### Removed
+
+- Removed `recoverCurrentDevicePassword`. ([#5995](https://github.com/MetaMask/core/pull/5995))
 
 ## [1.0.0]
 

packages/seedless-onboarding-controller/package.json

@@ -49,7 +49,7 @@
   "dependencies": {
     "@metamask/auth-network-utils": "^0.3.0",
     "@metamask/base-controller": "^8.0.1",
-    "@metamask/toprf-secure-backup": "^0.3.1",
+    "@metamask/toprf-secure-backup": "^0.4.0",
     "@metamask/utils": "^11.2.0",
     "async-mutex": "^0.5.0"
   },
@@ -86,7 +86,9 @@
   "lavamoat": {
     "allowScripts": {
       "@lavamoat/preinstall-always-fail": false,
-      "@metamask/toprf-secure-backup": true
+      "@metamask/toprf-secure-backup": true,
+      "@metamask/keyring-controller>ethereumjs-wallet>ethereum-cryptography>keccak": false,
+      "@metamask/keyring-controller>ethereumjs-wallet>ethereum-cryptography>secp256k1": false
     }
   }
 }