1 /* 2 * Copyright 2022, The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 package com.android.rkpdapp; 18 19 /** 20 * A {@link RemotelyProvisionedKey} holds an attestation key and the 21 * corresponding remotely provisioned certificate chain. 22 * 23 * @hide 24 */ 25 @RustDerive(Eq=true, PartialEq=true) 26 parcelable RemotelyProvisionedKey { 27 /** 28 * The remotely-provisioned key that may be used to sign attestations. The 29 * format of this key is opaque, and need only be understood by the 30 * IRemotelyProvisionedComponent that generated it. 31 * 32 * Any private key material contained within this blob must be encrypted. 33 * 34 * @see IRemotelyProvisionedComponent 35 */ 36 byte[] keyBlob; 37 38 /** 39 * Sequence of DER-encoded X.509 certificates that make up the attestation 40 * key's certificate chain. This is the binary encoding for a chain that is 41 * supported by Java's CertificateFactory.generateCertificates API. 42 */ 43 byte[] encodedCertChain; 44 } 45