Android se provider #13
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
latest changes from cpathak master
Latest Changes
Fixed few bugs relating to Hmac operation, abort operation Modified the KMKeymasterApplet code to send back the inputConsumed length equal to input length.
instead. 2. Fill tmpArray to zeros after use. 3. Code indentation, Remove unused code.
2. Added Backup and restore functionality.
1. Provision Attestation IDs and Root key. 2. Provision Root certificate 3. Provision Shared secret.
2. Made changes to support only EC signing key instead of RSA key. 3. Clear HMAC nonce and generate it in setBootParams.
1. Renamed the state names and provision status names of the Applet. 2. Moved the validation logic of cert chain to decoder. 3. Replace nest if else with switch.
Add Begin/End STATE, rm old B&R & mv handle statem
2. Updated the comments. 3. Modified the Instruction command values.
2. Renamed setDeviceBooted to clearDeviceBooted. 3. Removed UINSTALLED_STATE, INACTIVE_STATE.
Added real numbers for reference (to be referred in design doc too)
Update KMKeymasterApplet.java
2. Removed commented code 3. Removed TODO code which is already handled. 4. Added Extended errors inside KMError to map ISOExceptions to KMErrors.
Included vendorPatchLevel and bootPatchLevel in KeyCharateristics. Added check for vendorPatchLevel and bootPatchLevel in upgradeKeyCmd
…ory class. Modified applet code to use these functions whereever necessary.
2. Used Proper Tag names in KMAttetationCert class instead of hard-coding.
Resructured code and related changes
Corrected the values of extended errorCodes. Removed the hard-coded tags in KMAttestationCertImpl
Updated README file.
Updated the links for Applet Design document and HAL design document.
…emasterApplet can override it.
2. Added getCertificateChain function which parses the chain of certificates. 3. Bug fixes.
subrahmanyaman
referenced
this pull request
in subrahmanyaman/JavaCardKeymaster
Aug 26, 2021
Android se provider
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Support for AndroidSEProvider, which is compliant to JavaCard platform, Classic Edition 3.0.5.
Changed work flow states
Added new provision commands.
Support for Global platoform Amendment H in AndroidSEProvider.
Project restructuring.
Bug fixes.