commit b8fe0e98bd5e4bea106ee4c9e35081dcef0af21d
author Eran Messeri <eranm@google.com> Thu Nov 02 13:59:09 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Nov 02 13:59:09 2023 +0000
tree 1b5ebe60e995ec96b4f13048f38142258ca5080d
parent ecf90eb72ee6c1b9db5a0fd564d102ebc4802235
parent 83a90a4db6b8e54a76c872319d95c7234ed8e5a2

Merge "Clarifying the KM challenge size" into main

keystore/java/android/security/keystore/KeyGenParameterSpec.java

diff --git a/keystore/java/android/security/keystore/KeyGenParameterSpec.java b/keystore/java/android/security/keystore/KeyGenParameterSpec.java
index 1ba41b1..b714035 100644
--- a/keystore/java/android/security/keystore/KeyGenParameterSpec.java
+++ b/keystore/java/android/security/keystore/KeyGenParameterSpec.java
@@ -1596,6 +1596,8 @@
          * {@link #getAttestationChallenge()} returns non-null and the spec is used to generate a
          * symmetric (AES or HMAC) key, {@link javax.crypto.KeyGenerator#generateKey()} will throw
          * {@link java.security.InvalidAlgorithmParameterException}.
+         *
+         * <p>The challenge may be up to 128 bytes.
          */
         @NonNull
         public Builder setAttestationChallenge(byte[] attestationChallenge) {