Disable strongbox on keystore writable IC

openwallet-foundation-labs · Apr 11, 2023 · e2ba82a · e2ba82a
1 parent 45662cd
commit e2ba82a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/identity/src/main/java/com/android/identity/KeystoreWritableIdentityCredential.java b/identity/src/main/java/com/android/identity/KeystoreWritableIdentityCredential.java
@@ -122,12 +122,14 @@ private Collection<X509Certificate> ensureCredentialKey(byte[] challenge) {
 
             mKeyPair = null;
             boolean isStrongBoxBacked = false;
+            /* Disable StrongBox usage for now, see Issue #259 for details
             PackageManager pm = mContext.getPackageManager();
             if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.P &&
                     pm.hasSystemFeature(PackageManager.FEATURE_STRONGBOX_KEYSTORE)) {
                 isStrongBoxBacked = true;
                 builder.setIsStrongBoxBacked(true);
             }
+            */
             kpg.initialize(builder.build());
             mKeyPair = kpg.generateKeyPair();
             Log.i(TAG, "CredentialKey created, strongBoxBacked=" + isStrongBoxBacked);