Skip to content

Commit

Permalink
drop constant for disabling attest key
Browse files Browse the repository at this point in the history
There is no other option on devices using remote key provisioning since
it's incompatible with pinning without this feature.
  • Loading branch information
thestinger committed May 14, 2023
1 parent bd657b1 commit 0695c77
Showing 1 changed file with 1 addition and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,6 @@ class AttestationProtocol {
private static final int FINGERPRINT_LENGTH = FINGERPRINT_HASH_FUNCTION.bits() / 8;

private static final boolean PREFER_STRONGBOX = true;
private static final boolean USE_ATTEST_KEY = true;

// Challenge message:
//
Expand Down Expand Up @@ -1417,8 +1416,7 @@ static AttestationResult generateSerialized(final Context context, final byte[]
final String attestationKeystoreAlias;
final boolean useStrongBox;
@SuppressLint("InlinedApi")
final boolean canUseAttestKey = (alwaysHasAttestKey || pm.hasSystemFeature(PackageManager.FEATURE_KEYSTORE_APP_ATTEST_KEY))
&& USE_ATTEST_KEY;
final boolean canUseAttestKey = (alwaysHasAttestKey || pm.hasSystemFeature(PackageManager.FEATURE_KEYSTORE_APP_ATTEST_KEY));
final boolean useAttestKey;
if (hasPersistentKey) {
final String freshKeyStoreAlias = statePrefix + KEYSTORE_ALIAS_FRESH;
Expand Down

0 comments on commit 0695c77

Please sign in to comment.