tree 248caf8badec9fcb1b59f71380283de32d2378fd
parent bc04a28238082241973fce57a7c3fe2cb2bccd9e
author Brian C. Young <bcyoung@google.com> 1510875919 -0800
committer Brian C. Young <bcyoung@google.com> 1516898593 -0800

Add "Unlocked device required" parameter to keys

Add a keymaster parameter for keys that should be inaccessible when
the device screen is locked. "Locked" here is a state where the device
can be used or accessed without any further trust factor such as a
PIN, password, fingerprint, or trusted face or voice.

This parameter is added to the Java keystore interface for key
creation and import, as well as enums specified by and for the native
keystore process.

Test: go/asym-write-test-plan

Bug: 67752510

Change-Id: Ic1ec3bde05f8a28e20b9443b7f0078749921f297