diff --git a/proprietary-files.txt b/proprietary-files.txt
index 605e8612..362b1c86 100644
--- a/proprietary-files.txt
+++ b/proprietary-files.txt
@@ -414,11 +414,11 @@ vendor/lib64/libtinyxml2_1.so|ff32deb110acb02cb5def5f3404f9064c1276483
 vendor/lib/hw/vulkan.adreno.so|139868cf11006199fffc109b7a207e4e7f4cbd18
 vendor/lib64/hw/vulkan.adreno.so|9215100009b574f71dc75272f22a499302ea121d
 
-# HotwordEnrollment
--product/priv-app/HotwordEnrollmentOKGoogleWCD9340/HotwordEnrollmentOKGoogleWCD9340.apk|1cbc6ae6490cfc6e16619773809b9afcc9998f91
--product/priv-app/HotwordEnrollmentXGoogleWCD9340/HotwordEnrollmentXGoogleWCD9340.apk|24b4885a1f9194c65f378a2afd8e08b4b11842d8
+# HotwordEnrollment - from blueline-user 12 SP1A.210812.016.C2 8618562 release-keys
+-product/priv-app/HotwordEnrollmentOKGoogleWCD9340/HotwordEnrollmentOKGoogleWCD9340.apk|7161356d39a17b52e4464f598bc106fc88566007
+-product/priv-app/HotwordEnrollmentXGoogleWCD9340/HotwordEnrollmentXGoogleWCD9340.apk|a329a2d5fe984cb016c9cd764d97ce01bd42ff9a
 system_ext/etc/permissions/com.android.hotwordenrollment.common.util.xml|563a58554d9c0dd0608552b644fbf74519a447bb
-system_ext/framework/com.android.hotwordenrollment.common.util.jar|bef92589e75a6da6043f85f4b9b0e85866429624
+system_ext/framework/com.android.hotwordenrollment.common.util.jar|c764b636e0be426a66be09dd08ab9c1921327ef0
 
 # IRQ balance - from LA.UM.9.1.r1-11500.02-SMxxx0.QSSI12.0
 vendor/bin/msm_irqbalance|b075c2f4092c175950a2c26d19bf2013e2efd6d5
@@ -488,11 +488,11 @@ vendor/lib64/libOmxQcelp13Dec.so|9d8f53e61fbcdaa124fc8a5e4903ce5ff026cb28
 vendor/lib64/libOmxWmaDec.so|bd5cf940ada1c52b81ca597759cbd004562eab8c
 vendor/lib64/libmm-color-convertor.so|ec90d3a541736302cf860e53b9f4c756d921b896
 
-# Mlipay - from wayne V11.0.3.0.PDCCNXM
-vendor/bin/mlipayd@1.1|035249e2ee388064597e21275fbe8284b68a819c
+# Mlipay - from lavender QKQ1.190910.002 V12.5.7.0.QFGCNXM
+vendor/bin/mlipayd@1.1|a8cd2b8e51a1e8bd1325847b607f81e4f5600f2f
 vendor/etc/init/vendor.xiaomi.hardware.mlipay@1.1-service.rc|b5ab5bcd031fe4d9781b5911c0595eaeac8b80ea
-vendor/lib64/libmlipay.so|3d78c8a99c9248df20ad7ebc2c9abbd4c579d38c
-vendor/lib64/libmlipay@1.1.so|885d0c6eba14c5d2da5e245844bea3c3ae1540af
+vendor/lib64/libmlipay.so|c3589fa6bae9a78c622a768e65eac07ac8da6d9c
+vendor/lib64/libmlipay@1.1.so|d56a1f39930bc44891a22fc5490efe6aa0eb4a2c
 
 # Peripheral - from Honeywell/hon660/hon660:12/94.00.03/0037:user/release-keys
 vendor/bin/pm-proxy|e7b60d477d1c4f7a012408e0804e658bb255aef4
diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te
index b3feeb68..367680fb 100644
--- a/sepolicy/vendor/system_app.te
+++ b/sepolicy/vendor/system_app.te
@@ -21,3 +21,4 @@ allow system_app zygote:unix_stream_socket { getopt };
 
 get_prop(system_app, system_prop);
 set_prop(system_app, system_prop);
+hal_client_domain(system_app, hal_mlipay);
diff --git a/staging/interfaces/xiaomi/hardware/mtdservice/1.0/Android.bp b/staging/interfaces/xiaomi/hardware/mtdservice/1.0/Android.bp
new file mode 100755
index 00000000..0ce12369
--- /dev/null
+++ b/staging/interfaces/xiaomi/hardware/mtdservice/1.0/Android.bp
@@ -0,0 +1,14 @@
+// This file is autogenerated by hidl-gen -Landroidbp.
+
+hidl_interface {
+    name: "vendor.xiaomi.hardware.mtdservice@1.0",
+    root: "vendor.xiaomi",
+    system_ext_specific: true,
+    srcs: [
+        "IMTService.hal",
+    ],
+    interfaces: [
+        "android.hidl.base@1.0",
+    ],
+    gen_java: true,
+}
diff --git a/staging/interfaces/xiaomi/hardware/mtdservice/1.0/IMTService.hal b/staging/interfaces/xiaomi/hardware/mtdservice/1.0/IMTService.hal
new file mode 100755
index 00000000..69153ec0
--- /dev/null
+++ b/staging/interfaces/xiaomi/hardware/mtdservice/1.0/IMTService.hal
@@ -0,0 +1,23 @@
+/*
+ * Copyright (C) 2022 The LineageOS Project
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+package vendor.xiaomi.hardware.mtdservice@1.0;
+
+interface IMTService {
+    getFid() generates (string fid);
+    eccSign(uint32_t keyType, string text) generates (string signData);
+    reload(string text, string sign) generates (int32_t result);
+    enroll(string appname, int32_t enrollType) generates (string enrolldata);
+    ifaa_key_get_version() generates (int32_t result);
+    ifaa_key_prepare() generates (string ret);
+    ifaa_key_load(string data_text, string sign_text) generates (int32_t result);
+    fido_key_get_version() generates (int32_t result);
+    fido_key_prepare() generates (string ret);
+    fido_key_load(string data_text, string sign_text) generates (int32_t result);
+    soter_generate() generates (string ret);
+    soter_get_state() generates (int32_t result);
+    soter_set_state(int32_t state);
+};