android-attestation/at.asitplus.attestation.android/AndroidAttestationConfiguration

AndroidAttestationConfiguration

class AndroidAttestationConfiguration @JvmOverloads constructor(val packageName: String, val signatureDigests: List<ByteArray>, val appVersion: Int? = null, val androidVersion: Int? = null, patchLevel: PatchLevel? = null, val requireStrongBox: Boolean = false, val bootloaderUnlockAllowed: Boolean = false, val requireRollbackResistance: Boolean = false, val ignoreLeafValidity: Boolean = false)

Main Android Key attestation configuration class serving as ground truth for all key attestation verifications

Constructors

@JvmOverloads

fun AndroidAttestationConfiguration(packageName: String, signatureDigests: List<ByteArray>, appVersion: Int? = null, androidVersion: Int? = null, patchLevel: PatchLevel? = null, requireStrongBox: Boolean = false, bootloaderUnlockAllowed: Boolean = false, requireRollbackResistance: Boolean = false, ignoreLeafValidity: Boolean = false)

Properties

androidVersion

val androidVersion: Int? = null

optional parameter If set, attestation enforces Android version to be greater or equal to this parameter. Caution: Major Android versions increment in steps of thousands. I.e. Android 11 is specified as 11000

appVersion

val appVersion: Int? = null

optional parameter. If set, attestation enforces application version to be greater or equal to this parameter

bootloaderUnlockAllowed

val bootloaderUnlockAllowed: Boolean = false

Set to true if unlocked bootloaders should be allowed. Attention: Allowing unlocked bootloaders in production effectively defeats the purpose of Key Attestation. Useful for debugging/testing

ignoreLeafValidity

val ignoreLeafValidity: Boolean = false

Whether to ignore the timely validity of the leaf certificate

osPatchLevel

val osPatchLevel: Int?

Internal representation of the patch level as contained in the com.google.android.attestation.ParsedAttestationRecord

packageName

val packageName: String

Android app package name (e.g. at.asitplus.keyattestationdemio)

requireRollbackResistance

val requireRollbackResistance: Boolean = false

Unsupported by most devices. See Official Documentation

requireStrongBox

val requireStrongBox: Boolean = false

Set to true if StrongBox security level should be required

signatureDigests

val signatureDigests: List<ByteArray>

SHA-256 digests of signature certificates used to sign the APK. This is a Google cloud signing certificate for production play store releases. Being able to specify multiple digests makes it easy to use development builds and production builds in parallel