diff options
| author | Dan Cashman <dcashman@google.com> | 2018-01-02 14:55:58 -0800 |
|---|---|---|
| committer | Dan Cashman <dcashman@google.com> | 2018-01-02 15:51:07 -0800 |
| commit | cd4cb81fbad35249c27a26bb62756fe7d57804c6 (patch) | |
| tree | 480e8e23b44f16a583025c33e1a9c3202e68653d /rs/java/android/renderscript/ProgramFragmentFixedFunction.java | |
| parent | 67096e08a72beea85979a3aa9fc5b376b2c2b5ad (diff) | |
APK Signature Scheme v3: require Proof-of-rotation and signing certs to match.
Though not yet used, the Proof-of-rotation certificates are intended to be
used by the platform as equivalent to signing certificates, i.e. the presence
of a certificate in a Proof-of-rotation record should grant equivalent
capabilities as if the APK were signed by that certificate. For this to work,
each certificate needs to be signed by the previous one indicating a transfer
of trust all the way to the signing certificate of the APK. There is no case
in which the last certificate in the Proof-of-rotation record should not be
the one used to sign the APK, so enforce this during verification.
Bug: 64686581
Change-Id: Ia1b25a917a878fb378c8557b25a2bbfdd9da7d3d
Test: Builds, boots, passes
android.appsecurity.cts.PkgInstallSignatureVerificationTest
Diffstat (limited to 'rs/java/android/renderscript/ProgramFragmentFixedFunction.java')
0 files changed, 0 insertions, 0 deletions