tree 9c23ef5ba4200072628b658884afa9f5115f4c49
parent abe3d7bde45371c10345b06c691ff1d163279b84
author Kevin Chyn <kchyn@google.com> 1583435055 -0800
committer Kevin Chyn <kchyn@google.com> 1583435842 -0800

Do not allow -1 duration in setUserAuthenticationParameters

This is a completely new API so callers can follow the new pattern of
using 0 to require auth for every use of the key.

Supporting both -1 and 0 to require auth for every use of the key
increases CtsVerifier complexity exponentially (strongbox,
invalidated by enrollment, etc).

Fixes: 150823346
Test: builds
Change-Id: Ieef53a8b50f5119c5e52656e930bf16b1e8e3d89