multipaz/org.multipaz.device/DeviceAttestationValidationData

DeviceAttestationValidationData

data class DeviceAttestationValidationData(val attestationChallenge: ByteString, val iosReleaseBuild: Boolean, val iosAppIdentifier: String?, val androidGmsAttestation: Boolean, val androidVerifiedBootGreen: Boolean, val androidAppSignatureCertificateDigests: List<ByteString>)

Data necessary to validate a DeviceAttestation object.

Constructors

constructor(attestationChallenge: ByteString, iosReleaseBuild: Boolean, iosAppIdentifier: String?, androidGmsAttestation: Boolean, androidVerifiedBootGreen: Boolean, androidAppSignatureCertificateDigests: List<ByteString>)

Properties

androidAppSignatureCertificateDigests

val androidAppSignatureCertificateDigests: List<ByteString>

Allowed list of Android applications. Each element is the bytes of the SHA-256 of a signing certificate, see the Signature class in the Android SDK for details. If empty, allow any app.

androidGmsAttestation

val androidGmsAttestation: Boolean

Ensure that the private key in the Android attestation is certified as legitimate using the Google root private key.

androidVerifiedBootGreen

val androidVerifiedBootGreen: Boolean

Require Android clients to be in verified boot state "green".

attestationChallenge

val attestationChallenge: ByteString

Value of the challange parameter passed to DeviceCheck.generateAttestation method.

iosAppIdentifier

val iosAppIdentifier: String?

iOS app identifier that consists of a team id followed by a dot and app bundle name. If null, any app identifier is accepted.

iosReleaseBuild

val iosReleaseBuild: Boolean

Whether a release build is required on iOS. When false, both debug and release builds are accepted.