summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorShawn Willden <swillden@google.com>2015-04-07 13:56:30 -0600
committerShawn Willden <swillden@google.com>2015-04-10 07:28:25 -0600
commit8d6cf2594c9524205a6f5823378d1b983a1ad073 (patch)
treeff544d00d0f027ae90f70d6fcda1ec229a190d66
parent3f3b9790739a287223cfd63bc72e6b19635dced5 (diff)
downloadlibhardware-8d6cf2594c9524205a6f5823378d1b983a1ad073.tar.gz
Simplify keymaster_key_origin_t.
Change-Id: Iaba6156f238ea3bb1ad103b88ccea17344d296af
-rw-r--r--include/hardware/keymaster_defs.h9
1 files changed, 5 insertions, 4 deletions
diff --git a/include/hardware/keymaster_defs.h b/include/hardware/keymaster_defs.h
index 31a487ef..7c2d28d7 100644
--- a/include/hardware/keymaster_defs.h
+++ b/include/hardware/keymaster_defs.h
@@ -199,12 +199,13 @@ typedef enum {
} keymaster_digest_t;
/**
- * The origin of a key (or pair), i.e. where it was generated. Origin and can be used together to
- * determine whether a key may have existed outside of secure hardware. This type is new in 0_4.
+ * The origin of a key (or pair), i.e. where it was generated. Note that KM_TAG_ORIGIN can be found
+ * in either the hardware-enforced or software-enforced list for a key, indicating whether the key
+ * is hardware or software-based. Specifically, a key with KM_ORIGIN_GENERATED in the
+ * hardware-enforced list is guaranteed never to have existed outide the secure hardware.
*/
typedef enum {
- KM_ORIGIN_HARDWARE = 0, /* Generated in secure hardware */
- KM_ORIGIN_SOFTWARE = 1, /* Generated in non-secure software */
+ KM_ORIGIN_GENERATED = 0, /* Generated in keymaster */
KM_ORIGIN_IMPORTED = 2, /* Imported, origin unknown */
} keymaster_key_origin_t;