roboto/at.asitplus.attestation.android.engine/SupremeAttestationEngine

SupremeAttestationEngine

sealed class SupremeAttestationEngine : AndroidAttestationEngine<AttestationKeyDescription, AuthorizationList, X509Certificate> (source)

Modern, better, independent KMP-first Attestation engine based on in-house clean-room implementation of an attestation record parser that outperforms Google's legacy parser and Google's next-gen parser

Inheritors

Hardware

Software

Types

Hardware

class Hardware(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean) : SupremeAttestationEngine

Software

class Software(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean) : SupremeAttestationEngine

Properties

attestationRecord

open override val List<X509Certificate>.attestationRecord: AttestationKeyDescription?

certChainValidator

open override val certChainValidator: JvmCertChainValidator

trustAnchors

val trustAnchors: Collection<TrustedRoot>

Functions

verifyAndroidVersionFromAuthList

fun AuthorizationList.verifyAndroidVersionFromAuthList(versionOverride: Int?, patchLevel: PatchLevel?, verificationDate: Instant)

verifyAttestation

suspend fun verifyAttestation(certificates: List<X509Certificate>, verificationDate: Instant, expectedChallenge: ByteArray): AttestationKeyDescription

Verifies Android Key attestation Implements in accordance with https://developer.android.com/training/articles/security-key-attestation. Checks are performed according to the properties set in the attestationConfiguration.