a95550f8016bbb0dba086dbd73eec63e6cdbbe98 - platform/frameworks/base

commit	a95550f8016bbb0dba086dbd73eec63e6cdbbe98	[log] [tgz]
author	Alex Klyubin <klyubin@google.com>	Thu Jul 16 16:32:23 2015 -0700
committer	Alex Klyubin <klyubin@google.com>	Thu Jul 16 16:52:51 2015 -0700
tree	e6912c5fdb0fc66d6a5fc7fe48d3e8c640270877
parent	f7592b234acde62f0f0a93dad77284f12ca9980a [diff]

Add KM_MIN_MAC_LENGTH tag to HMAC and AES-GCM keys.

This makes Android Keystore add the KM_MIN_MAC_LENGTH tag to generated
and imported HMAC and AES-GCM keys. This tag specifies the minimum
length of the MAC/authentication tag authorized to be used for the
key.

For HMAC keys the minimum MAC length is set to the length of the
digest associated with the key (HMAC keys are authorized for exactly
one digest). For AES keys the minimum authetication tag length is set
to 96 bit. This is the minimum supported by Android Keystore's AES-GCM
implementation.

Bug: 22337277
Change-Id: Ic6e47cf084734d1592788dc58088889f7fff74eb

core/java/android/security/keymaster/KeymasterDefs.java[diff]
keystore/java/android/security/keystore/AndroidKeyStoreAuthenticatedAESCipherSpi.java[diff]
keystore/java/android/security/keystore/AndroidKeyStoreKeyGeneratorSpi.java[diff]
keystore/java/android/security/keystore/AndroidKeyStoreSpi.java[diff]
keystore/java/android/security/keystore/KeymasterUtils.java[diff]

5 files changed

tree: e6912c5fdb0fc66d6a5fc7fe48d3e8c640270877