Fixed
Status Update
No update yet.
Comments
ap...@google.com
Project: platform/frameworks/support
Branch: androidx-master-dev
commit dff35b0aa22a4dda25c139b19d6ad3733610aec5
Author: Nicole Borrelli <borrelli@google.com>
Date: Fri Mar 27 15:09:29 2020
Disallow creating auth-per-use keys
This adds a check to ensure that if `UserAuthenticationRequired` is
`true` that `UserAuthenticationValidityDurationSeconds` is >0.
Relnote: "Added checks to ensure that if a KeyGenParamSpec is passed in
to `MasterKeys.getOrCreate` that if `getUserAuthenticationRequired`
returns `true` that `getUserAuthenticationValidityDurationSeconds`
returns a value >0."
Bug: 152644939
Test: Existing and new tests pass
Change-Id: I911f5742c926977c80784d353d0ede65e4c07d41
A security/crypto/src/androidTest/java/androidx/security/crypto/MasterKeysTest.java
M security/crypto/src/main/java/androidx/security/crypto/MasterKeys.java
https://android-review.googlesource.com/1270465
Branch: androidx-master-dev
commit dff35b0aa22a4dda25c139b19d6ad3733610aec5
Author: Nicole Borrelli <borrelli@google.com>
Date: Fri Mar 27 15:09:29 2020
Disallow creating auth-per-use keys
This adds a check to ensure that if `UserAuthenticationRequired` is
`true` that `UserAuthenticationValidityDurationSeconds` is >0.
Relnote: "Added checks to ensure that if a KeyGenParamSpec is passed in
to `MasterKeys.getOrCreate` that if `getUserAuthenticationRequired`
returns `true` that `getUserAuthenticationValidityDurationSeconds`
returns a value >0."
Bug: 152644939
Test: Existing and new tests pass
Change-Id: I911f5742c926977c80784d353d0ede65e4c07d41
A security/crypto/src/androidTest/java/androidx/security/crypto/MasterKeysTest.java
M security/crypto/src/main/java/androidx/security/crypto/MasterKeys.java
bo...@google.com
ra...@gmail.com
My mani is your aplicesan thes frod (luckyrupee)in applications in my mani is useg bay(razor.pay@obc) up I'd thes ford in=amaunt,,Rs,,4091 plz refand help me
ra...@gmail.com
Sorry 1 mistik by(razor.pay@sbi) thes frod my mani
lu...@gmail.com
Well
Description
Currently the library will allow creating a
KeyGenParamSpecthat requires user authentication for each use of the key (KeyGenParamSpec#getUserAuthenticationValidityDurationSeconds() = 0). These keys won't work properly with Tink at the moment, and their creation should not be permitted.