multipaz/org.multipaz.device/DeviceCheck/generateAttestation

generateAttestation

actual suspend fun generateAttestation(secureArea: SecureArea, challenge: ByteString, secret: String?): DeviceAttestationResult

expect suspend fun generateAttestation(secureArea: SecureArea, challenge: ByteString, secret: String? = null): DeviceAttestationResult

Generates a device attestation that proves the integrity of the device/OS/wallet app and creates a certain opaque private key that resides securely on the device.

The only operation that this opaque private key can be used for is generating assertions using generateAssertion method.

The party requesting the attestation can verify it using DeviceAttestation.validate and can use the object to request further assertions using generateAssertion.

Return

a DeviceAttestationResult containing a DeviceAttestation which can be sent to the party requesting the attestation.

Parameters

secureArea

a platform-specific SecureArea, on Android use AndroidKeystoreSecureArea and on iOS use SecureEnclaveSecureArea.

challenge

should come from the party requesting the attestation, for freshness.

secret

optional secret for identifying the client, only used in DeviceAttestationSoftware.

actual suspend fun generateAttestation(secureArea: SecureArea, challenge: ERROR CLASS: Symbol not found for ByteString, secret: String?): DeviceAttestationResult

actual suspend fun generateAttestation(secureArea: SecureArea, challenge: ByteString, secret: String?): DeviceAttestationResult