android-attestation/at.asitplus.attestation.android/AndroidAttestationChecker

AndroidAttestationChecker

class AndroidAttestationChecker @JvmOverloads constructor(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual })

Constructors

Link copied to clipboard
@JvmOverloads
fun AndroidAttestationChecker(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual })

Types

Link copied to clipboard
class RevocationList(json: JsonObject)

taken and adapted from com.google.android.attestation.CertificateRevocationStatus to separate downloading and checking

Functions

Link copied to clipboard
fun verifyAttestation(certificates: List<X509Certificate>, verificationDate: Date = Date(), expectedChallenge: ByteArray): ParsedAttestationRecord

Verifies Android Key attestation Implements in accordance with https://developer.android.com/training/articles/security-key-attestation. Checks are performed according to the properties set in the attestationConfiguration.