roboto/at.asitplus.attestation.android/Roboto

Roboto

class Roboto @JvmOverloads constructor(val attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual })(source)

Verifies an Android attestation with the engines enabled in attestationConfiguration.

When multiple engines are enabled, verification succeeds if any one engine accepts the attestation. In particular, enabling software attestation accepts software-only attestations as a fallback even while hardware attestation remains enabled. Keep software attestation disabled when hardware backing is required.

Constructors

Roboto

@JvmOverloads

constructor(attestationConfiguration: AndroidAttestationConfiguration, verifyChallenge: (expected: ByteArray, actual: ByteArray) -> Boolean = { expected, actual -> expected contentEquals actual })

Types

Companion

object Companion

Properties

attestationConfiguration

val attestationConfiguration: AndroidAttestationConfiguration

Functions

collectDebugInfo

@JvmName(name = "collectDebugInfoSuspending")

suspend fun collectDebugInfo(certificates: List<X509Certificate>, expectedChallenge: ByteArray, verificationDate: Instant = Clock.System.now()): AndroidDebugAttestationStatement

Packs

collectDebugInfoBlocking

fun Roboto.collectDebugInfoBlocking(certificates: List<X509Certificate>, expectedChallenge: ByteArray, verificationDate: Instant = Clock.System.now()): AndroidDebugAttestationStatement

Blocking version of Roboto.collectDebugInfo

collectDebugInfoJ

@JvmName(name = "collectDebugInfo")

fun collectDebugInfoJ(certificates: List<X509Certificate>, expectedChallenge: ByteArray, verificationDate: Instant = java.time.Instant.now()): AndroidDebugAttestationStatement

@JvmName(name = "collectDebugInfo")

fun collectDebugInfoJ(certificates: List<X509Certificate>, expectedChallenge: ByteArray, verificationDate: Date = Date()): AndroidDebugAttestationStatement

Java-Friendly method

revocationListsForChallenge

fun revocationListsForChallenge(challenge: ByteArray): List<ConfigWithList>

verify

suspend fun verify(certificates: List<X509Certificate>, verificationDate: Instant = Clock.System.now(), expectedChallenge: ByteArray): KmmResult<List<X509Certificate>>

Verifies Android Key attestation Implements in accordance with https://developer.android.com/training/articles/security-key-attestation. Checks are performed according to the properties set in the attestationConfiguration.

verifyBlocking

fun Roboto.verifyBlocking(certificates: List<X509Certificate>, verificationDate: Instant = Clock.System.now(), expectedChallenge: ByteArray): KmmResult<List<X509Certificate>>

Blocking version of Roboto.verifyAttestation