commit 4f73689e26e1fb20215e74d291178b80ae11137e
author Eran Messeri <eranm@google.com> Thu Nov 02 13:59:09 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Nov 02 13:59:09 2023 +0000
tree aba3f12ff6ffc507d645218d9949b5bed10356d9
parent 93439a212b4a0fcf38df7d91846013aff7ee55af
parent 79cb9920338e061d83cd4d584502b579b785b93b

Merge "Document the allowed challenge size" into main

security/keymint/aidl/android/hardware/security/keymint/Tag.aidl

diff --git a/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl b/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl
index 36f0106..aa7bf28 100644
--- a/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl
+++ b/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl
@@ -643,6 +643,8 @@
      * Tag::ATTESTATION_CHALLENGE is used to deliver a "challenge" value to the attested key
      * generation/import methods, which must place the value in the KeyDescription SEQUENCE of the
      * attestation extension.
+     * The challenge value may be up to 128 bytes. If the caller provides a bigger challenge,
+     * INVALID_INPUT_LENGTH error should be returned.
      *
      * Must never appear in KeyCharacteristics.
      */