strongBox

Whether to back this key with a StrongBox secure element.

  • REQUIRED: use StrongBox; key generation fails if the device lacks StrongBox or the algorithm/params are unsupported.

  • PREFERRED (default): use StrongBox if available and it supports the requested algorithm/params, otherwise transparently fall back to the TEE.

  • DISCOURAGED: do not use StrongBox.

See also