blob: a704cfc0abdbd97952bd71674885c2e393a2c5d4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
// Copyright (c) 2013 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROMEOS_ATTESTATION_ATTESTATION_CONSTANTS_H_
#define CHROMEOS_ATTESTATION_ATTESTATION_CONSTANTS_H_
#include "chromeos/chromeos_export.h"
namespace chromeos {
namespace attestation {
// Options available for customizing an attestation certificate.
enum AttestationCertificateOptions {
CERTIFICATE_OPTION_NONE = 0,
// A stable identifier is simply an identifier that is not affected by device
// state changes, including device recovery.
CERTIFICATE_INCLUDE_STABLE_ID = 1,
// Device state information contains a quoted assertion of whether the device
// is in verified mode.
CERTIFICATE_INCLUDE_DEVICE_STATE = 1 << 1,
};
// Key types supported by the Chrome OS attestation subsystem.
enum AttestationKeyType {
// The key will be associated with the device itself and will be available
// regardless of which user is signed-in.
KEY_DEVICE,
// The key will be associated with the current user and will only be available
// when that user is signed-in.
KEY_USER,
};
// Options available for customizing an attestation challenge response.
enum AttestationChallengeOptions {
CHALLENGE_OPTION_NONE = 0,
// Indicates that a SignedPublicKeyAndChallenge should be embedded in the
// challenge response.
CHALLENGE_INCLUDE_SIGNED_PUBLIC_KEY = 1,
};
// Available attestation certificate profiles.
enum AttestationCertificateProfile {
// Uses the following certificate options:
// CERTIFICATE_INCLUDE_STABLE_ID
// CERTIFICATE_INCLUDE_DEVICE_STATE
PROFILE_ENTERPRISE_MACHINE_CERTIFICATE,
// Uses the following certificate options:
// CERTIFICATE_INCLUDE_DEVICE_STATE
PROFILE_ENTERPRISE_USER_CERTIFICATE,
};
// A key name for the Enterprise Machine Key. This key should always be stored
// as a DEVICE_KEY.
CHROMEOS_EXPORT extern const char kEnterpriseMachineKey[];
// A key name for the Enterprise User Key. This key should always be stored as
// a USER_KEY.
CHROMEOS_EXPORT extern const char kEnterpriseUserKey[];
} // namespace attestation
} // namespace chromeos
#endif // CHROMEOS_ATTESTATION_ATTESTATION_CONSTANTS_H_
|
