From b40754fd8b7c8668159f4fa56c5bab52a04ea997 Mon Sep 17 00:00:00 2001 From: Enginex0 Date: Fri, 19 Jun 2026 16:50:16 +0100 Subject: [PATCH] chore(release): publish v6.0.1-282 --- module/changelog.md | 13 +++++++++++++ module/update.json | 6 +++--- 2 files changed, 16 insertions(+), 3 deletions(-) diff --git a/module/changelog.md b/module/changelog.md index 1a13845..02a2230 100644 --- a/module/changelog.md +++ b/module/changelog.md @@ -1,3 +1,16 @@ +## TEESimulator-RS v6.0.1-282 + +AUTO-mode key attestation now forges plain attestation from the keybox instead of deferring to the real TEE. + +### Detection coverage +- AUTO dispatch probed the device with `checkTeeFunctionality`, which only proves the TEE can mint one EC key. It says nothing about RSA attestation, device-ID attestation, or whether a patched chain survives RSA verify. Plain attestation requests (attest-key OFF, challenge present) were routed to PATCH and deferred to hardware, so devices that can't back that surfaced KeyAttestation reds: `ATTESTATION_KEYS_NOT_PROVISIONED` (-49) and `BLOCK_TYPE_IS_NOT_01`. +- AUTO targets carrying an attestation challenge now take the FORGE path, the same one attest-key-ON already used: a synthetic chain built from the keybox and rooted under the Google root key. Requests with no challenge still pass through to real hardware, so KeyDetector's hardware-backed checks are unaffected. + +### Verified +- Offline conformance against real FORGE captures: uid10389 and uid10154 chains are GREEN; the root SPKI byte-matches `GOOGLE_ROOT_PUBLIC_KEY`. + +--- + ## TEESimulator-RS v6.0.1-280 Clears the Duck Detector generate-mode parcel fingerprint that real Android 16 hardware also trips, fixes RSA attestation under an EC-only keybox, and restores device-property attestation for Play Integrity hardware apps such as BHIM and UPI. Generate-mode fix field-confirmed on Android 16. diff --git a/module/update.json b/module/update.json index 29d3ec1..9818201 100644 --- a/module/update.json +++ b/module/update.json @@ -1,6 +1,6 @@ { - "version": "v6.0.1-280", - "versionCode": 280, - "zipUrl": "https://github.com/Enginex0/TEESimulator-RS/releases/download/v6.0.1-280/TEESimulator-RS-v6.0.1-280-Release.zip", + "version": "v6.0.1-282", + "versionCode": 282, + "zipUrl": "https://github.com/Enginex0/TEESimulator-RS/releases/download/v6.0.1-282/TEESimulator-RS-v6.0.1-282-Release.zip", "changelog": "https://raw.githubusercontent.com/Enginex0/TEESimulator-RS/main/module/changelog.md" }