bridge/com.lastlock.bridge.core.attestation/AndroidAttestationProvider

AndroidAttestationProvider

object AndroidAttestationProvider : AttestationProvider

Functions

open suspend override fun clearAttestationStateForReAttestation()

Clears in-memory and on-device attestation state so a subsequent full attestation can succeed. Invoked when the stored key is no longer valid on Link or locally.

fetchNonce

open suspend override fun fetchNonce(keyId: String?): ByteArray

Returns the persisted key identifier if there is an attested key pair persisted in the secure enclave of the device.

generateAssertionObject

open suspend override fun generateAssertionObject(keyId: String, nonce: ByteArray): AssertionObject

generateAttestedKeyPair

open suspend override fun generateAttestedKeyPair(): AttestationObject

generateCertificateForAttestation

fun generateCertificateForAttestation(): ByteString

Generates certificate chain from the private key created in the system. This certificate is then to be sent to Link for verifying attestation.

getStoredKeyRecord

open suspend override fun getStoredKeyRecord(): String?

provideGrpcChannel

@Synchronized

fun provideGrpcChannel(channel: ManagedChannel)

signNonceWithAttestedKey

fun signNonceWithAttestedKey(nonce: ByteArray): ByteArray

Signs the provided nonce with the persisted attested private keys stored on the device. The signature returned can be used for assertion flows verifying the integrity of the device