Unlock Link Attestation For Free

Key attestation provides a way for a device's secure hardware to verify that an asymmetric key is in secure hardware, protected against compromise of the Android OS.

The Android Keystore system lets you store private keys in a container to make it more difficult to extract from the device. Once keys are in the keystore, they can be used for cryptographic operations with the private key material remaining non-exportable.

This attestation provides assurance that the properties of the device (for example, the serial number) are legitimate (as attested to by the device's Secure Enclave and verified by Apple's servers) and not spoofed.

Key attestation aims to provide a way to strongly determine if an asymmetric key pair is hardware-backed, what the properties of the key are, and what constraints are applied to its usage. ID attestation allows the device to provide proof of its hardware identifiers, such as serial number or IMEI.

Key Attestation gives you more confidence that the keys you use in your app are stored in a device's hardware-backed keystore. The following sections describe how to verify the properties of hardware-backed keys and how to interpret the attestation certificates' extension data.

Key attestation provides a way for a device's secure hardware to verify that an asymmetric key is in secure hardware, protected against compromise of the Android OS.

App attestation uses a series of integrity tests and measurements to verify an app's integrity. Once integrity is proved, a cryptographic is provided and shared with the backend servers for verification.