kiosk-ops-sdk/com.sarastarquant.kioskops.sdk.crypto/KeyAttestationStatus

KeyAttestationStatus

data class KeyAttestationStatus(val isHardwareBacked: Boolean, val securityLevel: SecurityLevel, val keyCreatedAt: Long?, val attestationChain: List<X509Certificate>?, val keyAlias: String, val keyAlgorithm: String?, val keySize: Int?)

Attestation status for a cryptographic key.

Provides information about key storage, security properties, and optional attestation certificate chain for remote verification.

Constructors

KeyAttestationStatus

constructor(isHardwareBacked: Boolean, securityLevel: SecurityLevel, keyCreatedAt: Long?, attestationChain: List<X509Certificate>?, keyAlias: String, keyAlgorithm: String?, keySize: Int?)

Properties

attestationChain

val attestationChain: List<X509Certificate>?

Certificate chain for remote attestation, if available. The chain starts with the attestation certificate and ends at a root CA.

hasAttestationChain

val hasAttestationChain: Boolean

Check if this key has a valid attestation chain.

isHardwareBacked

val isHardwareBacked: Boolean

True if key is stored in secure hardware.

val keyAlgorithm: String?

The key algorithm (e.g., "AES", "EC").

val keyAlias: String

The key alias in the Keystore.

val keyCreatedAt: Long?

Timestamp when the key was created (epoch ms), if known.

val keySize: Int?

The key size in bits.

val securityLevel: SecurityLevel

The security level of key storage.

Functions

meetsRequirements

fun meetsRequirements(requireHardware: Boolean = false, minimumSecurityLevel: SecurityLevel = SecurityLevel.SOFTWARE): Boolean

Check if this key meets minimum security requirements.