To use this feature, true must be passed to the setIsStrongBoxBacked method in either the KeyGenParameterSpec.Builder class or the KeyProtection.Builder class when generating or importing keys using AndroidKeystore.
Devices running Android 9 (API level 28) and higher can have a StrongBox Keymaster module, an implementation of the Keymaster HAL that resides in a hardware security module which has its own CPU, Secure storage, a true random number generator and a mechanism to resist package tampering. Applications can verify if the key is stored inside the security hardware (by checking if KeyInfo.isinsideSecureHardware returns true ). Keymaster Hardware Abstraction Layer (HAL) was introduced with Android 6 (API level 23). As mentioned before, hardware-backed Android KeyStore gives another layer to defense-in-depth security concept for Android.
0 kommentar(er)
