ChipVerifier

Strategy interface for active authentication (chip tamper check).

Active authentication proves the chip is genuine by performing an ECDSA-SHA384 INTERNAL AUTHENTICATE operation on-chip and verifying the resulting signature.

The SDK ships two implementations:

• OnDeviceVerifier — default, verifies on-device using the bundled MAI cert chain

• PassthroughVerifier — returns the raw proof material for the caller's backend to verify

Configure via ro.eidkit.sdk.config.EidKitConfig:

EidKitConfig {
    chipVerifier = ChipVerifier.onDevice()      // default
    // chipVerifier = ChipVerifier.passthrough() // raw sig+cert to caller
}