commit e3f7d20bedc36c5a61270ac03124236209ee57b4
author Janis Danisevskis <jdanis@google.com> Sat Mar 20 14:21:22 2021 -0700
committer Janis Danisevskis <jdanis@google.com> Sat Mar 20 21:34:51 2021 +0000
tree a66d041ca418f5db056d58f343d0dd44baa1cd17
parent 9b49201b938a810e6a4c36c2f996fec7877ddcd4

Keystore 2.0: Respect Keymint hardware info timestampTokenRequired.

Bug: 178222844
Test: N/A
Change-Id: I0cde84791b0d3a060da3619f9b18b81cb9bb5822

keystore2/src/security_level.rs

diff --git a/keystore2/src/security_level.rs b/keystore2/src/security_level.rs
index 641b77a..255e92f 100644
--- a/keystore2/src/security_level.rs
+++ b/keystore2/src/security_level.rs
@@ -270,10 +270,7 @@
                 purpose,
                 key_properties.as_ref(),
                 operation_parameters.as_ref(),
-                // TODO b/178222844 Replace this with the configuration returned by
-                //      KeyMintDevice::getHardwareInfo.
-                //      For now we assume that strongbox implementations need secure timestamps.
-                self.security_level == SecurityLevel::STRONGBOX,
+                self.hw_info.timestampTokenRequired,
             )
             .context("In create_operation.")?;