summaryrefslogtreecommitdiff
path: root/security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp
diff options
context:
space:
mode:
authorShawn Willden <swillden@google.com>2021-04-05 14:39:05 -0600
committerShawn Willden <swillden@google.com>2021-04-27 09:22:25 -0600
commit3cb64a68227e04f802551f5fef0a0721225756ff (patch)
tree7aa30408179e22f228c5cdd1adc2a580f7b3ee09 /security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp
parent2fff1705623c2af5c7f2c38cd511c32abf9a6afb (diff)
Add attestation format documentation
Somehow the attestation format docs got dropped from KeyMint in the transition from Keymaster. This replaces them, and also clarifies that KeyMint StrongBox should not support device attestation. Test: VtsAidlKeyMintTargetTest Change-Id: I2334e99b4797c7a0e2e59727ffa730cf7504df31
Diffstat (limited to 'security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp')
-rw-r--r--security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp4
1 files changed, 2 insertions, 2 deletions
diff --git a/security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp b/security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp
index 6202a8ba97..ce23f7088d 100644
--- a/security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp
+++ b/security/keymint/aidl/vts/functional/KeyMintAidlTestBase.cpp
@@ -942,7 +942,7 @@ bool verify_attestation_record(const string& challenge, //
EXPECT_EQ(ErrorCode::OK, error);
if (error != ErrorCode::OK) return false;
- EXPECT_GE(att_attestation_version, 3U);
+ EXPECT_EQ(att_attestation_version, 100U);
vector<uint8_t> appId(app_id.begin(), app_id.end());
// check challenge and app id only if we expects a non-fake certificate
@@ -953,7 +953,7 @@ bool verify_attestation_record(const string& challenge, //
expected_sw_enforced.push_back(TAG_ATTESTATION_APPLICATION_ID, appId);
}
- EXPECT_GE(att_keymaster_version, 4U);
+ EXPECT_EQ(att_keymaster_version, 100U);
EXPECT_EQ(security_level, att_keymaster_security_level);
EXPECT_EQ(security_level, att_attestation_security_level);