Merge "identity: Specify that challenges can be up to 32 bytes in length." am: 6bf721e811

Original change: https://android-review.googlesource.com/c/platform/frameworks/base/+/1963461

Change-Id: I9eb5ecbe68a47a23a0898484101072a00b92a0d3
This commit is contained in:
Treehugger Robot
2022-02-01 19:45:39 +00:00
committed by Automerger Merge Worker
2 changed files with 6 additions and 3 deletions

View File

@@ -454,7 +454,8 @@ public abstract class IdentityCredential {
* @param challenge is a non-empty byte array whose contents should be unique, fresh and * @param challenge is a non-empty byte array whose contents should be unique, fresh and
* provided by the issuing authority. The value provided is embedded in the * provided by the issuing authority. The value provided is embedded in the
* generated CBOR and enables the issuing authority to verify that the * generated CBOR and enables the issuing authority to verify that the
* returned proof is fresh. * returned proof is fresh. Implementations are required to support
* challenges at least 32 bytes of length.
* @return the COSE_Sign1 data structure above * @return the COSE_Sign1 data structure above
*/ */
public @NonNull byte[] proveOwnership(@NonNull byte[] challenge) { public @NonNull byte[] proveOwnership(@NonNull byte[] challenge) {
@@ -485,7 +486,8 @@ public abstract class IdentityCredential {
* @param challenge is a non-empty byte array whose contents should be unique, fresh and * @param challenge is a non-empty byte array whose contents should be unique, fresh and
* provided by the issuing authority. The value provided is embedded in the * provided by the issuing authority. The value provided is embedded in the
* generated CBOR and enables the issuing authority to verify that the * generated CBOR and enables the issuing authority to verify that the
* returned proof is fresh. * returned proof is fresh. Implementations are required to support
* challenges at least 32 bytes of length.
* @return the COSE_Sign1 data structure above * @return the COSE_Sign1 data structure above
*/ */
public @NonNull byte[] delete(@NonNull byte[] challenge) { public @NonNull byte[] delete(@NonNull byte[] challenge) {

View File

@@ -59,7 +59,8 @@ public abstract class WritableIdentityCredential {
* @param challenge is a non-empty byte array whose contents should be unique, fresh and * @param challenge is a non-empty byte array whose contents should be unique, fresh and
* provided by the issuing authority. The value provided is embedded in the * provided by the issuing authority. The value provided is embedded in the
* attestation extension and enables the issuing authority to verify that the * attestation extension and enables the issuing authority to verify that the
* attestation certificate is fresh. * attestation certificate is fresh. Implementations are required to support
* challenges at least 32 bytes of length.
* @return the X.509 certificate for this credential's CredentialKey. * @return the X.509 certificate for this credential's CredentialKey.
*/ */
public abstract @NonNull Collection<X509Certificate> getCredentialKeyCertificateChain( public abstract @NonNull Collection<X509Certificate> getCredentialKeyCertificateChain(