diff options
| author | Shawn Willden <swillden@google.com> | 2020-01-15 17:52:53 -0700 |
|---|---|---|
| committer | Shawn Willden <swillden@google.com> | 2020-02-11 15:51:03 -0700 |
| commit | e59d5b1e2e37820173b809e33b08f15210d7335b (patch) | |
| tree | c27059964ac9c9e3691b2b33e3c28ac75fdc2fb5 | |
| parent | a8c23bc91e5f6634648c9cfdddd45b326e931d51 (diff) | |
| download | libhardware-e59d5b1e2e37820173b809e33b08f15210d7335b.tar.gz | |
Add Keymaster4.1 definitions.
Test: VtsHalKeymasterV4_1TargetTest
Change-Id: I501e63a577368d78c609f868e452603b4110a970
| -rw-r--r-- | include/hardware/keymaster_defs.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/include/hardware/keymaster_defs.h b/include/hardware/keymaster_defs.h index d92ce007..0b7bf8a4 100644 --- a/include/hardware/keymaster_defs.h +++ b/include/hardware/keymaster_defs.h @@ -77,6 +77,7 @@ typedef enum { KM_TAG_BOOTLOADER_ONLY = KM_BOOL | 302, /* Usable only by bootloader */ KM_TAG_ROLLBACK_RESISTANCE = KM_BOOL | 303, /* Hardware enforced deletion with deleteKey * or deleteAllKeys is supported */ + KM_TAG_EARLY_BOOT_ONLY = KM_BOOL | 305, /* Key can only be used during early boot. */ /* * Tags that should be semantically enforced by hardware if possible and will otherwise be @@ -161,6 +162,8 @@ typedef enum { attestation */ KM_TAG_ATTESTATION_ID_MODEL = KM_BYTES | 717, /* Used to provide the device's model name to be included in attestation */ + KM_TAG_DEVICE_UNIQUE_ATTESTATION = KM_BOOL | 720, /* Indicates StrongBox device-unique attestation + is requested. */ /* Tags used only to provide data to or receive data from operations */ KM_TAG_ASSOCIATED_DATA = KM_BYTES | 1000, /* Used to provide associated data for AEAD modes. */ @@ -373,6 +376,7 @@ typedef enum { typedef enum { KM_SECURITY_LEVEL_SOFTWARE = 0, KM_SECURITY_LEVEL_TRUSTED_ENVIRONMENT = 1, + KM_SECURITY_LEVEL_STRONGBOX = 2, } keymaster_security_level_t; /** @@ -461,6 +465,9 @@ typedef enum { KM_ERROR_ROLLBACK_RESISTANCE_UNAVAILABLE = -67, KM_ERROR_NO_USER_CONFIRMATION = -71, KM_ERROR_DEVICE_LOCKED = -72, + KM_ERROR_EARLY_BOOT_ENDED = -73, + KM_ERROR_ATTESTATION_KEYS_NOT_PROVISIONED = -74, + KM_ERROR_ATTESTATION_IDS_NOT_PROVISIONED = -75, KM_ERROR_UNIMPLEMENTED = -100, KM_ERROR_VERSION_MISMATCH = -101, |