| commit | bebb098dfd030092ef6faa2abafcdaf06d20d451 | [log] [tgz] |
|---|---|---|
| author | Karuna Wadhera <kwadhera@google.com> | Wed Jan 08 11:08:23 2025 -0800 |
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | Wed Jan 08 11:08:23 2025 -0800 |
| tree | d6b5313e2ecd4ba9fe0970dac1e4581674bee098 | |
| parent | 0405c0743b59a42bca28b96655661bc95f58abbf [diff] | |
| parent | 3b0b271c4b638339d4200ab2b25ee53e0069cfe5 [diff] |
Merge "Clarify where unhashed module info can be found" into main am: 467635c1cc am: 3b0b271c4b Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/3441081 Change-Id: If5399aa9ed1e38bbeb21d7b824b1ad87be5a494b Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
diff --git a/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl b/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl index e56c193..7ea5f5d 100644 --- a/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl +++ b/security/keymint/aidl/android/hardware/security/keymint/Tag.aidl
@@ -904,6 +904,9 @@ * Tag::MODULE_HASH specifies the SHA-256 hash of the DER-encoded module information (see * KeyCreationResult.aidl for the ASN.1 schema). * + * KeyStore clients can retrieve the unhashed DER-encoded module information from Android + * via KeyStoreManager.getSupplementaryAttestationInfo. + * * This tag is never provided or returned from KeyMint in the key characteristics. It exists * only to define the tag for use in the attestation record. *