Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "identity: Specify that challenges can be up to 32 bytes in length." am: 6bf721e811 am: 2b08d4ce08 am: 8473d40e9f

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/frameworks/base/+/1963461

Change-Id: I0d4a96b69fe878663a3c70ce051f733d32401913
This commit is contained in:
Treehugger Robot
2022-02-01 23:08:22 +00:00
committed by Automerger Merge Worker
parent cfe5a8c9f0 8473d40e9f
commit de6000549f
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
identity/java/android/security/identity/IdentityCredential.java
View File

@@ -454,7 +454,8 @@ public abstract class IdentityCredential {
* @param challenge is a non-empty byte array whose contents should be unique, fresh and
* provided by the issuing authority. The value provided is embedded in the
* generated CBOR and enables the issuing authority to verify that the
* returned proof is fresh.
* returned proof is fresh. Implementations are required to support
* challenges at least 32 bytes of length.
* @return the COSE_Sign1 data structure above
*/
public @NonNull byte[] proveOwnership(@NonNull byte[] challenge) {
@@ -485,7 +486,8 @@ public abstract class IdentityCredential {
* @param challenge is a non-empty byte array whose contents should be unique, fresh and
* provided by the issuing authority. The value provided is embedded in the
* generated CBOR and enables the issuing authority to verify that the
* returned proof is fresh.
* returned proof is fresh. Implementations are required to support
* challenges at least 32 bytes of length.
* @return the COSE_Sign1 data structure above
*/
public @NonNull byte[] delete(@NonNull byte[] challenge) {

3
identity/java/android/security/identity/WritableIdentityCredential.java
View File

@@ -59,7 +59,8 @@ public abstract class WritableIdentityCredential {
* @param challenge is a non-empty byte array whose contents should be unique, fresh and
* provided by the issuing authority. The value provided is embedded in the
* attestation extension and enables the issuing authority to verify that the
* attestation certificate is fresh.
* attestation certificate is fresh. Implementations are required to support
* challenges at least 32 bytes of length.
* @return the X.509 certificate for this credential's CredentialKey.
*/
public abstract @NonNull Collection<X509Certificate> getCredentialKeyCertificateChain(