verifyCombined

abstract fun verifyCombined(attestationObject: ByteArray, assertionFromDevice: ByteArray, referenceClientData: ByteArray, challenge: ByteArray): AttestationResult(source)

Verifies an App Attestation in conjunction with an assertion for some client data.

First, it verifies the app attestation, afterwards it verifies the assertion, checks whether at most the assertion was the first thing that was signed after attesting the key (i.e. signature counter = 0 before signing the assertion), and verifies whether the client data referenced within the assertion matches referenceClientData

Parameters

attestationObject

the AppAttest attestation object to verify

assertionFromDevice

the assertion data created on the device.

referenceClientData

the expected client data to be contained in assertionFromDevice