Skip to content

Commit 45662cd

Browse files
committed
Keystore: Disable StrongBox usage for now.
StrongBox is unfortunately broken on some older devices so we need a way to have the application to specify whether to use it or not, depending on e.g. make/model of the device. A future update will make this configurable. See Issue #259 for details. Test: Manually tested.
1 parent c9bcbed commit 45662cd

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

identity/src/main/java/com/android/identity/CredentialData.java

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1310,12 +1310,15 @@ Collection<X509Certificate> getAuthKeysNeedingCertification() {
13101310
.setDigests(KeyProperties.DIGEST_SHA256, KeyProperties.DIGEST_SHA512);
13111311

13121312
boolean isStrongBoxBacked = false;
1313+
/* Disable StrongBox usage for now, see Issue #259 for details
1314+
*
13131315
PackageManager pm = mContext.getPackageManager();
13141316
if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.P &&
13151317
pm.hasSystemFeature(PackageManager.FEATURE_STRONGBOX_KEYSTORE)) {
13161318
isStrongBoxBacked = true;
13171319
builder.setIsStrongBoxBacked(true);
13181320
}
1321+
*/
13191322
kpg.initialize(builder.build());
13201323
kpg.generateKeyPair();
13211324
Log.i(TAG, "AuthKey created, strongBoxBacked=" + isStrongBoxBacked);

0 commit comments

Comments
 (0)