blob: 10e9538db479cc266ef2d4fffae0a14ce8ffd4ff (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
/* Copyright 2019, The Android Open Source Project, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.google.android.attestation;
/** Key Attestation constants */
public class Constants {
// The Google root certificate that must have been used to sign the root
// certificate in a real attestation certificate chain from a compliant
// device.
// (Note, the sample chain used here is not signed with this certificate.)
public static final String GOOGLE_ROOT_CERTIFICATE =
"-----BEGIN CERTIFICATE-----\n"
+ "MIIFYDCCA0igAwIBAgIJAOj6GWMU0voYMA0GCSqGSIb3DQEBCwUAMBsxGTAXBgNV"
+ "BAUTEGY5MjAwOWU4NTNiNmIwNDUwHhcNMTYwNTI2MTYyODUyWhcNMjYwNTI0MTYy"
+ "ODUyWjAbMRkwFwYDVQQFExBmOTIwMDllODUzYjZiMDQ1MIICIjANBgkqhkiG9w0B"
+ "AQEFAAOCAg8AMIICCgKCAgEAr7bHgiuxpwHsK7Qui8xUFmOr75gvMsd/dTEDDJdS"
+ "Sxtf6An7xyqpRR90PL2abxM1dEqlXnf2tqw1Ne4Xwl5jlRfdnJLmN0pTy/4lj4/7"
+ "tv0Sk3iiKkypnEUtR6WfMgH0QZfKHM1+di+y9TFRtv6y//0rb+T+W8a9nsNL/ggj"
+ "nar86461qO0rOs2cXjp3kOG1FEJ5MVmFmBGtnrKpa73XpXyTqRxB/M0n1n/W9nGq"
+ "C4FSYa04T6N5RIZGBN2z2MT5IKGbFlbC8UrW0DxW7AYImQQcHtGl/m00QLVWutHQ"
+ "oVJYnFPlXTcHYvASLu+RhhsbDmxMgJJ0mcDpvsC4PjvB+TxywElgS70vE0XmLD+O"
+ "JtvsBslHZvPBKCOdT0MS+tgSOIfga+z1Z1g7+DVagf7quvmag8jfPioyKvxnK/Eg"
+ "sTUVi2ghzq8wm27ud/mIM7AY2qEORR8Go3TVB4HzWQgpZrt3i5MIlCaY504LzSRi"
+ "igHCzAPlHws+W0rB5N+er5/2pJKnfBSDiCiFAVtCLOZ7gLiMm0jhO2B6tUXHI/+M"
+ "RPjy02i59lINMRRev56GKtcd9qO/0kUJWdZTdA2XoS82ixPvZtXQpUpuL12ab+9E"
+ "aDK8Z4RHJYYfCT3Q5vNAXaiWQ+8PTWm2QgBR/bkwSWc+NpUFgNPN9PvQi8WEg5Um"
+ "AGMCAwEAAaOBpjCBozAdBgNVHQ4EFgQUNmHhAHyIBQlRi0RsR/8aTMnqTxIwHwYD"
+ "VR0jBBgwFoAUNmHhAHyIBQlRi0RsR/8aTMnqTxIwDwYDVR0TAQH/BAUwAwEB/zAO"
+ "BgNVHQ8BAf8EBAMCAYYwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cHM6Ly9hbmRyb2lk"
+ "Lmdvb2dsZWFwaXMuY29tL2F0dGVzdGF0aW9uL2NybC8wDQYJKoZIhvcNAQELBQAD"
+ "ggIBACDIw41L3KlXG0aMiS//cqrG+EShHUGo8HNsw30W1kJtjn6UBwRM6jnmiwfB"
+ "Pb8VA91chb2vssAtX2zbTvqBJ9+LBPGCdw/E53Rbf86qhxKaiAHOjpvAy5Y3m00m"
+ "qC0w/Zwvju1twb4vhLaJ5NkUJYsUS7rmJKHHBnETLi8GFqiEsqTWpG/6ibYCv7rY"
+ "DBJDcR9W62BW9jfIoBQcxUCUJouMPH25lLNcDc1ssqvC2v7iUgI9LeoM1sNovqPm"
+ "QUiG9rHli1vXxzCyaMTjwftkJLkf6724DFhuKug2jITV0QkXvaJWF4nUaHOTNA4u"
+ "JU9WDvZLI1j83A+/xnAJUucIv/zGJ1AMH2boHqF8CY16LpsYgBt6tKxxWH00XcyD"
+ "CdW2KlBCeqbQPcsFmWyWugxdcekhYsAWyoSf818NUsZdBWBaR/OukXrNLfkQ79Iy"
+ "ZohZbvabO/X+MVT3rriAoKc8oE2Uws6DF+60PV7/WIPjNvXySdqspImSN78mflxD"
+ "qwLqRBYkA3I75qppLGG9rp7UCdRjxMl8ZDBld+7yvHVgt1cVzJx9xnyGCC23Uaic"
+ "MDSXYrB4I4WHXPGjxhZuCuPBLTdOLU8YRvMYdEvYebWHMpvwGCF6bAx3JBpIeOQ1"
+ "wDB5y0USicV3YgYGmi+NZfhA4URSh77Yd6uuJOJENRaNVTzk\n"
+ "-----END CERTIFICATE-----";
static final String KEY_DESCRIPTION_OID = "1.3.6.1.4.1.11129.2.1.17";
static final int ATTESTATION_VERSION_INDEX = 0;
static final int ATTESTATION_SECURITY_LEVEL_INDEX = 1;
static final int KEYMASTER_VERSION_INDEX = 2;
static final int KEYMASTER_SECURITY_LEVEL_INDEX = 3;
static final int ATTESTATION_CHALLENGE_INDEX = 4;
static final int UNIQUE_ID_INDEX = 5;
static final int SW_ENFORCED_INDEX = 6;
static final int TEE_ENFORCED_INDEX = 7;
// Authorization list tags. The list is in this AOSP file:
// hardware/libhardware/include/hardware/keymaster_defs.h
static final int KM_TAG_PURPOSE = 1;
static final int KM_TAG_ALGORITHM = 2;
static final int KM_TAG_KEY_SIZE = 3;
static final int KM_TAG_DIGEST = 5;
static final int KM_TAG_PADDING = 6;
static final int KM_TAG_EC_CURVE = 10;
static final int KM_TAG_RSA_PUBLIC_EXPONENT = 200;
static final int KM_TAG_ROLLBACK_RESISTANCE = 303;
static final int KM_TAG_ACTIVE_DATE_TIME = 400;
static final int KM_TAG_ORIGINATION_EXPIRE_DATE_TIME = 401;
static final int KM_TAG_USAGE_EXPIRE_DATE_TIME = 402;
static final int KM_TAG_NO_AUTH_REQUIRED = 503;
static final int KM_TAG_USER_AUTH_TYPE = 504;
static final int KM_TAG_AUTH_TIMEOUT = 505;
static final int KM_TAG_ALLOW_WHILE_ON_BODY = 506;
static final int KM_TAG_TRUSTED_USER_PRESENCE_REQUIRED = 507;
static final int KM_TAG_TRUSTED_CONFIRMATION_REQUIRED = 508;
static final int KM_TAG_UNLOCKED_DEVICE_REQUIRED = 509;
static final int KM_TAG_ALL_APPLICATIONS = 600;
static final int KM_TAG_APPLICATION_ID = 601;
static final int KM_TAG_CREATION_DATE_TIME = 701;
static final int KM_TAG_ORIGIN = 702;
static final int KM_TAG_ROLLBACK_RESISTANT = 703;
static final int KM_TAG_ROOT_OF_TRUST = 704;
static final int KM_TAG_OS_VERSION = 705;
static final int KM_TAG_OS_PATCH_LEVEL = 706;
static final int KM_TAG_ATTESTATION_APPLICATION_ID = 709;
static final int KM_TAG_ATTESTATION_ID_BRAND = 710;
static final int KM_TAG_ATTESTATION_ID_DEVICE = 711;
static final int KM_TAG_ATTESTATION_ID_PRODUCT = 712;
static final int KM_TAG_ATTESTATION_ID_SERIAL = 713;
static final int KM_TAG_ATTESTATION_ID_IMEI = 714;
static final int KM_TAG_ATTESTATION_ID_MEID = 715;
static final int KM_TAG_ATTESTATION_ID_MANUFACTURER = 716;
static final int KM_TAG_ATTESTATION_ID_MODEL = 717;
static final int KM_TAG_VENDOR_PATCH_LEVEL = 718;
static final int KM_TAG_BOOT_PATCH_LEVEL = 719;
static final int ROOT_OF_TRUST_VERIFIED_BOOT_KEY_INDEX = 0;
static final int ROOT_OF_TRUST_DEVICE_LOCKED_INDEX = 1;
static final int ROOT_OF_TRUST_VERIFIED_BOOT_STATE_INDEX = 2;
static final int ROOT_OF_TRUST_VERIFIED_BOOT_HASH_INDEX = 3;
// Some security values. The complete list is in this AOSP file:
// hardware/libhardware/include/hardware/keymaster_defs.h
static final int KM_SECURITY_LEVEL_SOFTWARE = 0;
static final int KM_SECURITY_LEVEL_TRUSTED_ENVIRONMENT = 1;
static final int KM_SECURITY_LEVEL_STRONG_BOX = 2;
static final int KM_VERIFIED_BOOT_STATE_VERIFIED = 0;
static final int KM_VERIFIED_BOOT_STATE_SELF_SIGNED = 1;
static final int KM_VERIFIED_BOOT_STATE_UNVERIFIED = 2;
static final int KM_VERIFIED_BOOT_STATE_FAILED = 3;
}
|
