disable attest key downgrade support

GrapheneOS · May 12, 2023 · 84e97db · 84e97db
1 parent 0e3e93b
commit 84e97db
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/src/main/java/app/attestation/auditor/AttestationProtocol.java b/app/src/main/java/app/attestation/auditor/AttestationProtocol.java
@@ -124,7 +124,7 @@ class AttestationProtocol {
 
     private static final boolean PREFER_STRONGBOX = true;
     private static final boolean USE_ATTEST_KEY = true;
-    private static final boolean ALLOW_ATTEST_KEY_DOWNGRADE = true;
+    private static final boolean ALLOW_ATTEST_KEY_DOWNGRADE = false;
 
     // Challenge message:
     //