multipaz/org.multipaz.certext/CloudKeyAttestation

CloudKeyAttestation

data class CloudKeyAttestation(val challenge: ByteString, val passphrase: Boolean, val userAuthentication: Set<CloudUserAuthType>)

A key attestation for a key that exists in org.multipaz.securearea.cloud.CloudSecureArea which can be included in MultipazExtension in the certificate for the key being attested to.

The CDDL is defined as:

CloudKeyAttestation = {
  "challenge" : bstr,
  "passphrase": bool,
  "userAuthentication: CloudUserAuthentication
}

; The following values are defined for the kind of user authentication required.
;
;  0: No user authentication required for using the key
;  1: Authentication is required for use of the key, only PIN/Passcode can be used.
;  2: Authentication is required for use of the key, only biometrics can be used.
;  3: Authentication is required for use of the key, either PIN/Passcode or biometrics can be used.
;
CloudUserAuthentication = uint

This map may be extended in the future with additional fields.