Unlock Header Attestation For Free

Key attestation refers to verifying the integrity and authenticity of cryptographic keys stored within an HSM or other hardware device. It involves generating a cryptographic certificate that attests to the validity of the keys and ensures they have not been tampered with or compromised.

TPM key attestation is the ability of the entity requesting a certificate to cryptographically prove to a CA that the RSA key in the certificate request is protected by either "a" or "the" TPM that the CA trusts.

Key Attestation gives you more confidence that the keys you use in your app are stored in a device's hardware-backed keystore. The following sections describe how to verify the properties of hardware-backed keys and how to interpret the attestation certificates' extension data.

Key attestation aims to provide a way to strongly determine if an asymmetric key pair is hardware-backed, what the properties of the key are, and what constraints are applied to its usage. ID attestation allows the device to provide proof of its hardware identifiers, such as serial number or IMEI.

Key attestation provides a way for a device's secure hardware to verify that an asymmetric key is in secure hardware, protected against compromise of the Android OS.

The attestation process uses a series of measurements that are unique to an enclave. You can use these measurements to create access policies in external services to grant the enclave access to special cryptographic operations.

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices.

Full Attestation (A) - The identity of the caller is known, and they have the right to use the Caller ID for this call. Partial Attestation (B) - The originator knows the identity of the caller, but cannot confirm their right to use the Caller ID.