Skip to content

Fix incorrect ASN.1 encoding in android-key test vector#2378

Open
emlun wants to merge 1 commit intomainfrom
issue-2373-android-key-test-vectors
Open

Fix incorrect ASN.1 encoding in android-key test vector#2378
emlun wants to merge 1 commit intomainfrom
issue-2373-android-key-test-vectors

Conversation

@emlun
Copy link
Member

@emlun emlun commented Jan 14, 2026

The attestationSecurityLevel and keymintSecurityLevel values in the attestation extension (OID 1.3.6.1.4.1.11129.2.1.17) of the attestation certificate were incorrectly encoded as INTEGER type, but should be ENUMERATED type.

Fixes #2373.


Preview | Diff

The `attestationSecurityLevel` and `keymintSecurityLevel` values in the
`attestation` extension (OID `1.3.6.1.4.1.11129.2.1.17`) of the attestation
certificate were incorrectly encoded as INTEGER type, but should be ENUMERATED
type.

See: #2373
@emlun emlun requested a review from arnar January 14, 2026 20:02
@emlun emlun self-assigned this Jan 14, 2026
@Unknown-Robot
Copy link

Hi @emlun,

I'm planning to submit a follow-up PR to fix another issue I found in the Android Key Attestation vectors.

Since my changes will touch the same lines as this PR, I would prefer to base my work on top of your fix to avoid merge conflicts. Do you have a rough idea of when this might be merged into main ?

Thanks !

@emlun
Copy link
Member Author

emlun commented Jan 23, 2026

You don't need to wait for this to be merged, you're welcome to base your change on the issue-2373-android-key-test-vectors branch and open a PR targeting that branch as the base branch. Then your changes will merge into this PR instead of directly to main.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Incorrect ASN.1 tagging (INTEGER vs ENUMERATED) in Android Key Attestation test vector

4 participants