From 4a103c92312176b59aabfc3acffddf10da455a88 Mon Sep 17 00:00:00 2001 From: Enginex0 Date: Wed, 18 Mar 2026 03:24:58 +0100 Subject: [PATCH] docs(release): add v4.8.1 changelog for StrongBox op rejection fix --- module/changelog.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/module/changelog.md b/module/changelog.md index 9b10e67..1b38277 100644 --- a/module/changelog.md +++ b/module/changelog.md @@ -1,3 +1,9 @@ +## TEESimulator-RS v4.8.1: StrongBox Op Rejection Fix + +- **StrongBox op limit gate fix** — `trackAndEnforceOpLimit` was only called in the `Domain.KEY_ID` not-found path, so software-generated keys (found via `Domain.APP`) bypassed `STRONGBOX_MAX_CONCURRENT_OPS=4` entirely. DuckDetector's concurrent signing handles test created 24+ operations that all succeeded via LRU pruning instead of being rejected with `TOO_MANY_OPERATIONS (-29)`. Now enforced for all StrongBox createOperation paths. + +--- + ## TEESimulator-RS v4.8: StrongBox Hardening & LRU Pruning Tested against DuckDetector on OnePlus (Android 16, KSU). Tamper score dropped from 32 to 8.