diff options
| author | Shawn Willden <swillden@google.com> | 2020-12-21 09:58:22 -0700 |
|---|---|---|
| committer | Shawn Willden <swillden@google.com> | 2021-02-17 08:08:27 -0700 |
| commit | 7c130397115e7309c87aeb8f155bf3f518451907 (patch) | |
| tree | f004c4b1a53b51ee080ced41312f66129bf754ba /security/keymint/support/authorization_set.cpp | |
| parent | 0ace84a193a73e3220b3f74d7de6bbc2b6745368 (diff) | |
Add KeyPurpose::ATTEST_KEY.
This allows applications to generate their own attestation keys and
then use them to attest other application-generated keys.
Bug: 171845652
Test: VtsAidlKeyMintTargetTest
Change-Id: I32add16dcc2d1b29665a88024610f7bef7e50200
Diffstat (limited to 'security/keymint/support/authorization_set.cpp')
| -rw-r--r-- | security/keymint/support/authorization_set.cpp | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/security/keymint/support/authorization_set.cpp b/security/keymint/support/authorization_set.cpp index 8d4257101c..25eace3caf 100644 --- a/security/keymint/support/authorization_set.cpp +++ b/security/keymint/support/authorization_set.cpp @@ -191,6 +191,10 @@ AuthorizationSetBuilder& AuthorizationSetBuilder::EncryptionKey() { return Authorization(TAG_PURPOSE, KeyPurpose::DECRYPT); } +AuthorizationSetBuilder& AuthorizationSetBuilder::AttestKey() { + return Authorization(TAG_PURPOSE, KeyPurpose::ATTEST_KEY); +} + AuthorizationSetBuilder& AuthorizationSetBuilder::NoDigestOrPadding() { Authorization(TAG_DIGEST, Digest::NONE); return Authorization(TAG_PADDING, PaddingMode::NONE); |