multipaz/org.multipaz.device/AssertionBindingKeys

AssertionBindingKeys

data class AssertionBindingKeys(val publicKeys: List<EcPublicKey>, val nonce: ByteString, val clientId: String, val keyStorage: List<String>, val userAuthentication: List<String>, val issuedAt: Instant, val expiration: Instant? = null) : Assertion

Asserts that the given list of public keys corresponds to the freshly-minted private keys on the device with the given properties.

clientId and nonce are provided by the server. nonce is provided immediately before the key is created and it asserts freshness. clientId is provided during server/client initial handshake and it asserts that the private key resides on a particular device known to the server.

keyStorage and userAuthentication are as defined OpenID4VCI key attestation key_storage and user-authentication field. issuedAt and expiration semantics corresponds to iat and exp fields in JWT.

TODO: in addition to values defined in the OpenID4VCI spec, select well-defined values for key_storage and user-authentication that directly correspond to what is available on the platforms that we support and list them here.

Constructors

AssertionBindingKeys

constructor(publicKeys: List<EcPublicKey>, nonce: ByteString, clientId: String, keyStorage: List<String>, userAuthentication: List<String>, issuedAt: Instant, expiration: Instant? = null)

Properties

clientId

val clientId: String

expiration

val expiration: Instant? = null

issuedAt

val issuedAt: Instant

keyStorage

val keyStorage: List<String>

nonce

val nonce: ByteString

publicKeys

val publicKeys: List<EcPublicKey>

userAuthentication

val userAuthentication: List<String>