diff options
author | David Zeuthen <zeuthen@google.com> | 2022-11-14 15:22:24 -0500 |
---|---|---|
committer | David Zeuthen <zeuthen@google.com> | 2022-12-09 02:58:18 -0500 |
commit | c239db4114246dbca23482bd4f2e3237fcb3524e (patch) | |
tree | 5ed03d409794fff486474f12f0d678148cc84fb6 /identity/binder | |
parent | fdf7f52a1d20e2c1f9bd03e363692f3562d1f287 (diff) | |
download | security-c239db4114246dbca23482bd4f2e3237fcb3524e.tar.gz |
identity: Add support for setting minimum validity period for AuthKey.
This change adds support for specifying that an AuthKey should be
replaced if it's going to expire within a certain amount of time
configurable by the application. This also adds a way for the
application to learn about the expiration time of currently configured
AuthKeys.
Combined these two changes allow an application to get a perfect
picture of which AuthKeys are available, when they expire, and allows
the application to refresh AuthKeys well ahead of expiration dates.
Also remove checking storeStaticAuthenticationDataWithExpiration() is
only available on HAL version 3 and later (feature version 202101 and
later). This works on any HAL version.
Bug: 241912421
Test: atest VtsHalIdentityTargetTest
Test: atest android.security.identity.cts
Change-Id: Ic8274088035c31f73ad61645ee5e0281b3460837
Diffstat (limited to 'identity/binder')
-rw-r--r-- | identity/binder/android/security/identity/ICredential.aidl | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/identity/binder/android/security/identity/ICredential.aidl b/identity/binder/android/security/identity/ICredential.aidl index e6a9fae0..875b9341 100644 --- a/identity/binder/android/security/identity/ICredential.aidl +++ b/identity/binder/android/security/identity/ICredential.aidl @@ -60,7 +60,9 @@ interface ICredential { in boolean allowUsingExpiredKeys, in boolean incrementUsageCount); - void setAvailableAuthenticationKeys(in int keyCount, in int maxUsesPerKey); + void setAvailableAuthenticationKeys(in int keyCount, + in int maxUsesPerKey, + in long minValidTimeMillis); AuthKeyParcel[] getAuthKeysNeedingCertification(); @@ -73,6 +75,8 @@ interface ICredential { int[] getAuthenticationDataUsageCount(); + long[] getAuthenticationDataExpirations(); + IWritableCredential update(); } |