Android Attestation Library/at.asitplus.attestation.android

Package-level declarations

Types

abstract class AndroidAttestationChecker(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean)

AndroidAttestationConfiguration

data class AndroidAttestationConfiguration(val androidVersion: Int? = null, patchLevel: PatchLevel? = null, val requireStrongBox: Boolean = false, val allowBootloaderUnlock: Boolean = false, val requireRollbackResistance: Boolean = false, val ignoreLeafValidity: Boolean = false, hardwareAttestationRootKeys: Set<ByteArray> = linkedSetOf(GOOGLE_ROOT_CA_PUB_KEY.decodeBase64Bytes()), softwareAttestationRootKeys: Set<ByteArray> = linkedSetOf( GOOGLE_SOFTWARE_EC_ROOT.decodeBase64Bytes(), GOOGLE_SOFTWARE_RSA_ROOT.decodeBase64Bytes() ), val verificationSecondsOffset: Int = 0, val disableHardwareAttestation: Boolean = false, val enableNougatAttestation: Boolean = false, val enableSoftwareAttestation: Boolean = false, val applications: List<AndroidAttestationConfiguration.AppData>)

Main Android attestation configuration class serving as ground truth for all key and app attestation verifications.

EternalX509Certificate

class EternalX509Certificate(delegate: X509Certificate) : X509Certificate

HardwareAttestationChecker

class HardwareAttestationChecker @JvmOverloads constructor(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual }) : AndroidAttestationChecker

NougatHybridAttestationChecker

class NougatHybridAttestationChecker @JvmOverloads constructor(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual }) : AndroidAttestationChecker

PatchLevel

data class PatchLevel(val year: Int, val month: Int)

Nomen est omen

SoftwareAttestationChecker

class SoftwareAttestationChecker @JvmOverloads constructor(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual }) : AndroidAttestationChecker

Properties

DEFAULT_HARDWARE_TRUST_ANCHORS

val DEFAULT_HARDWARE_TRUST_ANCHORS: Array<PublicKey>

Default trust anchors used to verify hardware attestation

DEFAULT_SOFTWARE_TRUST_ANCHORS

val DEFAULT_SOFTWARE_TRUST_ANCHORS: Array<PublicKey>

Default trust anchors used to verify software attestation

Functions

setup

fun HttpClientEngine.setup(): HttpClient