OSDN Git Service

Add "Unlocked device required" parameter to keys
authorBrian C. Young <bcyoung@google.com>
Thu, 16 Nov 2017 23:36:43 +0000 (15:36 -0800)
committerBrian C. Young <bcyoung@google.com>
Wed, 14 Feb 2018 20:19:13 +0000 (12:19 -0800)
commitefc3f16be7870c84227b79f73f0ad7cab72a260f
tree9bc781e0e7caf005e6037866954262fbb6f3152d
parent5f76688c5a8eefd16bc51569263667e7f403f242
Add "Unlocked device required" parameter to keys

Add a keymaster parameter for keys that should be inaccessible when
the device screen is locked. "Locked" here is a state where the device
can be used or accessed without any further trust factor such as a
PIN, password, fingerprint, or trusted face or voice.

This parameter is added to the Java keystore interface for key
creation and import, as well as enums specified by and for the native
keystore process.

Test: CTS tests in I8a5affd1eaed176756175158e3057e44934fffed

Bug: 67752510

Change-Id: I314b848f6971d1849a7a6347d52e41d9604639ae
12 files changed:
api/current.txt
core/java/android/security/keymaster/KeymasterDefs.java
keystore/java/android/security/KeyStore.java
keystore/java/android/security/keystore/AndroidKeyStoreKeyGeneratorSpi.java
keystore/java/android/security/keystore/AndroidKeyStoreKeyPairGeneratorSpi.java
keystore/java/android/security/keystore/AndroidKeyStoreSpi.java
keystore/java/android/security/keystore/KeyGenParameterSpec.java
keystore/java/android/security/keystore/KeyProtection.java
keystore/java/android/security/keystore/KeymasterUtils.java
keystore/java/android/security/keystore/UserAuthArgs.java [new file with mode: 0644]
services/core/java/com/android/server/fingerprint/FingerprintService.java
services/core/java/com/android/server/policy/keyguard/KeyguardStateMonitor.java