Android Key Attestation Library/com.google.android.attestation/AuthorizationList

AuthorizationList

open class AuthorizationList

This data structure contains the key pair's properties themselves, as defined in the Keymaster hardware abstraction layer (HAL). You compare these values to the device's current state or to a set of expected values to verify that a key pair is still valid for use in your app.

Types

Asymmetric algorithms from https://cs.android.com/android/platform/superproject/+/master:hardware/interfaces/security/keymint/aidl/android/hardware/security/keymint/Algorithm.

Builder for an AuthorizationList.

enum DigestMode

From https://cs.android.com/android/platform/superproject/+/master:hardware/interfaces/security/keymint/aidl/android/hardware/security/keymint/Digest.

From https://cs.android.com/android/platform/superproject/+/master:hardware/interfaces/security/keymint/aidl/android/hardware/security/keymint/EcCurve.

From https://cs.android.com/android/platform/superproject/+/master:hardware/interfaces/security/keymint/aidl/android/hardware/security/keymint/KeyOrigin.

OperationPurpose

enum OperationPurpose

From https://cs.android.com/android/platform/superproject/+/master:hardware/interfaces/security/keymint/aidl/android/hardware/security/keymint/KeyPurpose.

enum PaddingMode

From https://cs.android.com/android/platform/superproject/+/master:hardware/interfaces/security/keymint/aidl/android/hardware/security/keymint/PaddingMode.

enum UserAuthType

Specifies the types of user authenticators that may be used to authorize this key.

Properties

val activeDateTime: Optional<Instant>

val algorithm: Optional<AuthorizationList.Algorithm>

allApplications

val allApplications: Boolean

allowWhileOnBody

val allowWhileOnBody: Boolean

val applicationId: Optional<Array<Byte>>

attestationApplicationId

val attestationApplicationId: Optional<AttestationApplicationId>

attestationApplicationIdBytes

val attestationApplicationIdBytes: Optional<Array<Byte>>

attestationIdBrand

val attestationIdBrand: Optional<Array<Byte>>

attestationIdDevice

val attestationIdDevice: Optional<Array<Byte>>

attestationIdImei

val attestationIdImei: Optional<Array<Byte>>

attestationIdManufacturer

val attestationIdManufacturer: Optional<Array<Byte>>

attestationIdMeid

val attestationIdMeid: Optional<Array<Byte>>

attestationIdModel

val attestationIdModel: Optional<Array<Byte>>

attestationIdProduct

val attestationIdProduct: Optional<Array<Byte>>

attestationIdSecondImei

val attestationIdSecondImei: Optional<Array<Byte>>

attestationIdSerial

val attestationIdSerial: Optional<Array<Byte>>

val authTimeout: Optional<Duration>

val bootPatchLevel: Optional<Integer>

creationDateTime

val creationDateTime: Optional<Instant>

val digest: ImmutableSet<AuthorizationList.DigestMode>

val ecCurve: Optional<AuthorizationList.EcCurve>

identityCredentialKey

val identityCredentialKey: Boolean

individualAttestation

val individualAttestation: Boolean

val keySize: Optional<Integer>

val noAuthRequired: Boolean

val origin: Optional<AuthorizationList.KeyOrigin>

originationExpireDateTime

val originationExpireDateTime: Optional<Instant>

val osPatchLevel: Optional<Integer>

val osVersion: Optional<Integer>

val padding: ImmutableSet<AuthorizationList.PaddingMode>

val purpose: ImmutableSet<AuthorizationList.OperationPurpose>

rollbackResistance

val rollbackResistance: Boolean

rollbackResistant

val rollbackResistant: Boolean

val rootOfTrust: Optional<RootOfTrust>

rsaPublicExponent

val rsaPublicExponent: Optional<Long>

trustedConfirmationRequired

val trustedConfirmationRequired: Boolean

trustedUserPresenceRequired

val trustedUserPresenceRequired: Boolean

unlockedDeviceRequired

val unlockedDeviceRequired: Boolean

usageExpireDateTime

val usageExpireDateTime: Optional<Instant>

val userAuthType: ImmutableSet<AuthorizationList.UserAuthType>

vendorPatchLevel

val vendorPatchLevel: Optional<Integer>

Functions

open fun builder(): AuthorizationList.Builder

open fun toAsn1Sequence(): ASN1Sequence