supreme-verifier/at.asitplus.attestation.supreme/SupremeConfiguration

SupremeConfiguration

@Serializable
data class SupremeConfiguration : AttestationConfiguration(source)

Integrated attestation configuration for the Supreme attestation verifier

This configuration deals with two aspects of integrated attestation:

  • Configuring attestation policies for Android and iOS.

  • Defining object identifiers and key constraints for fully integrated attestation.

To add custom Android revocation checkers, see AndroidRevocationList.loaderRegistry. To add custom time sources / clocks, see SupremeConfiguration.Clock.registry

See also

for more details on the semantics od OIDs and KeyConstraints

Constructors

Link copied to clipboard
constructor(android: AndroidAttestationConfiguration, ios: IosAttestationConfiguration, clock: SupremeConfiguration.Clock = SupremeConfiguration.Clock.System, verificationTimeOffset: Duration = Makoto.DEFAULT_TIME_OFFSET, attestationProofOID: ObjectIdentifier = WardenDefaults.OIDs.ATTESTATION_PROOF, genericDeviceNameOID: ObjectIdentifier? = WardenDefaults.OIDs.DEVICE_NAME, defaultKeyConstraints: KeyConstraints? = WardenDefaults.KeyConstraints.p256Signer)
constructor(ios: IosAttestationConfiguration, clock: SupremeConfiguration.Clock = SupremeConfiguration.Clock.System, verificationTimeOffset: Duration = Makoto.DEFAULT_TIME_OFFSET, attestationProofOID: ObjectIdentifier = WardenDefaults.OIDs.ATTESTATION_PROOF, genericDeviceNameOID: ObjectIdentifier? = WardenDefaults.OIDs.DEVICE_NAME, defaultKeyConstraints: KeyConstraints? = WardenDefaults.KeyConstraints.p256Signer)

iOS-Only configuration

constructor(android: AndroidAttestationConfiguration, clock: SupremeConfiguration.Clock = SupremeConfiguration.Clock.System, verificationTimeOffset: Duration = Makoto.DEFAULT_TIME_OFFSET, attestationProofOID: ObjectIdentifier = WardenDefaults.OIDs.ATTESTATION_PROOF, genericDeviceNameOID: ObjectIdentifier? = WardenDefaults.OIDs.DEVICE_NAME, defaultKeyConstraints: KeyConstraints? = WardenDefaults.KeyConstraints.p256Signer)

Android-Only configuration

Types

Link copied to clipboard
@Serializable(with = SupremeConfiguration.Clock.Serializer::class)
interface Clock

Configures the time source of a SupremeConfiguration

Link copied to clipboard

Properties

Link copied to clipboard
val android: AndroidAttestationConfiguration?

Android-specific attestation configuration. For full details, see AndroidAttestationConfiguration

Link copied to clipboard
@Serializable(with = ObjectIdentifierStringSerializer::class)
val attestationProofOID: ObjectIdentifier

Object identifier for the attestation proof.

Link copied to clipboard
Link copied to clipboard
val defaultKeyConstraints: KeyConstraints?

Configuration for default key constraints, such as supported cryptographic operations.

Link copied to clipboard
@Serializable(with = ObjectIdentifierStringSerializer::class)
val genericDeviceNameOID: ObjectIdentifier?

Optional object identifier for the generic device name.

Link copied to clipboard
val ios: IosAttestationConfiguration?

iOS-specific attestation configuration. For full details, see IosAttestationConfiguration

Link copied to clipboard
val verificationTimeOffset: Duration

The time offset used during attestation verification.

Functions

Link copied to clipboard
open override fun toJsonElement(): JsonObject
Link copied to clipboard
open override fun toJsonString(): String
Link copied to clipboard
open override fun toYamlString(): String
Generated by Dokka
© 2026 Copyright