aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTreehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com>2024-04-23 19:42:42 +0000
committerGerrit Code Review <noreply-gerritcodereview@google.com>2024-04-23 19:42:42 +0000
commit14c4a813c15ebf9de2ed99cda07c523620b70f47 (patch)
tree518373674ff3d5e674c7baeb0aa4e37f233c362d
parent6bb601d50de06969792e9b673f1edf42e6912f80 (diff)
parent86e11ea3b714b78da4ba7acea16bf2b52734a201 (diff)
downloadlibese-main.tar.gz
Merge "2nd IMEI attestation may be used independently." into mainHEADmastermain
-rw-r--r--ready_se/google/keymint/KM300/Applet/src/com/android/javacard/keymaster/KMKeymasterApplet.java22
1 files changed, 0 insertions, 22 deletions
diff --git a/ready_se/google/keymint/KM300/Applet/src/com/android/javacard/keymaster/KMKeymasterApplet.java b/ready_se/google/keymint/KM300/Applet/src/com/android/javacard/keymaster/KMKeymasterApplet.java
index abbc860..e122283 100644
--- a/ready_se/google/keymint/KM300/Applet/src/com/android/javacard/keymaster/KMKeymasterApplet.java
+++ b/ready_se/google/keymint/KM300/Applet/src/com/android/javacard/keymaster/KMKeymasterApplet.java
@@ -4070,17 +4070,6 @@ public class KMKeymasterApplet extends Applet implements AppletEvent, ExtendedLe
data[CERTIFICATE] = KMArray.instance((short) 0); // by default the cert is empty.
data[ORIGIN] = KMType.IMPORTED;
- // ID_IMEI should be present if ID_SECOND_IMEI is present
- short attIdTag =
- KMKeyParameters.findTag(
- KMType.BYTES_TAG, KMType.ATTESTATION_ID_SECOND_IMEI, data[KEY_PARAMETERS]);
- if (attIdTag != KMType.INVALID_VALUE) {
- KMTag.assertPresence(
- data[KEY_PARAMETERS],
- KMType.BYTES_TAG,
- KMType.ATTESTATION_ID_IMEI,
- KMError.CANNOT_ATTEST_IDS);
- }
importKey(apdu, keyFmt, scratchPad);
}
@@ -4548,17 +4537,6 @@ public class KMKeymasterApplet extends Applet implements AppletEvent, ExtendedLe
KMException.throwIt(KMError.UNSUPPORTED_TAG);
}
- // ID_IMEI should be present if ID_SECOND_IMEI is present
- short attIdTag =
- KMKeyParameters.findTag(
- KMType.BYTES_TAG, KMType.ATTESTATION_ID_SECOND_IMEI, data[KEY_PARAMETERS]);
- if (attIdTag != KMType.INVALID_VALUE) {
- KMTag.assertPresence(
- data[KEY_PARAMETERS],
- KMType.BYTES_TAG,
- KMType.ATTESTATION_ID_IMEI,
- KMError.CANNOT_ATTEST_IDS);
- }
short attKeyPurpose =
KMKeyParameters.findTag(KMType.ENUM_ARRAY_TAG, KMType.PURPOSE, data[KEY_PARAMETERS]);