generator/at.asitplus.attestation.generator/AndroidAttestationIssuer

AndroidAttestationIssuer

The runtime counterpart of IssuerSpec: a root, an attestation CA chain, and the keys to sign with.

All crypto material lives here and nowhere else; spec is the configuration that produced it, with a generated root filled back in, so GeneratorConfig(issuer.spec, …) reproduces this issuer exactly.

Every issue call mints a fresh attestation key and a fresh attested leaf key, as real devices do.

Types

Companion

object Companion

Properties

attestationCa

val attestationCa: CertifiedKey

Signs the per-issuance attestation key. Bottom-most CA of caChain, or root itself.

root

val root: CertifiedKey

The trust anchor of everything this issuer issues.

rootCertificate

val rootCertificate: X509Certificate

spec

val spec: IssuerSpec

Functions

configuration

fun configuration(attestations: List<AttestationSpec> = listOf(AttestationSpec()), outputDirectory: String = "generator-output"): GeneratorConfig

The configuration reproducing this issuer, together with the attestations to create from it.

issue

fun issue(attestation: AttestationSpec = AttestationSpec()): IssuedAttestation

fun issue(block: AttestationSpecBuilder.() -> Unit): IssuedAttestation

Builds the statement with the type-safe DSL instead of passing a prepared AttestationSpec.