TEESimulator-RS

3 Commits

Author SHA1 Message Date

Author	SHA1	Message	Date
小潼 GitHub JingMatrix	ab4fe643a3	Intercept updateSubcomponent to fix software key state inconsistency (#82 ) Apps attempting to update the certificate chain of a simulated software-based key (e.g., via KeyStore.setKeyEntry) currently trigger a KEY_NOT_FOUND error. This happens because the request is passed to the hardware Keystore daemon, which has no knowledge of keys existing only in the simulator's memory. To fix detecting points exploiting this inconsistency, we intercept the UPDATE_SUBCOMPONENT_TRANSACTION. If the target is a recognized virtual key, the simulator now: 1. Updates the in-memory certificate/chain metadata. 2. Returns NO_ERROR immediately to the caller. 3. Prevents the transaction from reaching the real hardware service. Co-authored-by: JingMatrix <jingmatrix@gmail.com>	2026-01-23 17:53:34 +01:00
小潼 GitHub JingMatrix	ce740542f7	Enforce attestation challenge length limit (#70 ) Throws IllegalArgumentException if the challenge exceeds 128 bytes, per Android specs. Also fixes a duplicate assignment typo in KeystoreInterceptor. Reference: https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.Builder#setAttestationChallenge(byte[]) Co-authored-by: JingMatrix <jingmatrix@gmail.com>	2026-01-20 19:00:48 +01:00
小潼andGitHub	119350f24b	Correctly handle `deleteKey` for software keys (#42 ) This resolves an issue introduced in `733e64c` where a `deleteKey` transaction for a software-generated key was incorrectly passed through to the hardware keystore. Since the hardware is unaware of such keys, this results in inconsistent state management. The success reply is formatted correctly without a result code, per the AIDL interface specification. Reference: https://cs.android.com/android/platform/superproject/main/+/main:out/soong/.intermediates/system/hardware/interfaces/keystore2/aidl/android.system.keystore2-V6-java-source/gen/android/system/keystore2/IKeystoreSecurityLevel.java;l=406	2025-12-04 20:01:16 +01:00

ab4fe643a3

Intercept updateSubcomponent to fix software key state inconsistency (#82 )

Apps attempting to update the certificate chain of a simulated software-based key (e.g., via KeyStore.setKeyEntry) currently trigger a KEY_NOT_FOUND error. This happens because the request is passed to the hardware Keystore daemon, which has no knowledge of keys existing only in the simulator's memory.

To fix detecting points exploiting this inconsistency, we intercept the UPDATE_SUBCOMPONENT_TRANSACTION. If the target is a recognized virtual key, the simulator now:
1. Updates the in-memory certificate/chain metadata.
2. Returns NO_ERROR immediately to the caller.
3. Prevents the transaction from reaching the real hardware service.

Co-authored-by: JingMatrix <jingmatrix@gmail.com>

2026-01-23 17:53:34 +01:00

ce740542f7

Enforce attestation challenge length limit (#70 )

Throws IllegalArgumentException if the challenge exceeds 128 bytes, per Android specs. Also fixes a duplicate assignment typo in KeystoreInterceptor.

Reference: https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.Builder#setAttestationChallenge(byte[])

Co-authored-by: JingMatrix <jingmatrix@gmail.com>

2026-01-20 19:00:48 +01:00

小潼andGitHub

119350f24b

Correctly handle deleteKey for software keys (#42 )

This resolves an issue introduced in 733e64c where a `deleteKey` transaction for a software-generated key was incorrectly passed through to the hardware keystore. Since the hardware is unaware of such keys, this results in inconsistent state management.

The success reply is formatted correctly without a result code, per the AIDL interface specification.

Reference: https://cs.android.com/android/platform/superproject/main/+/main:out/soong/.intermediates/system/hardware/interfaces/keystore2/aidl/android.system.keystore2-V6-java-source/gen/android/system/keystore2/IKeystoreSecurityLevel.java;l=406

2025-12-04 20:01:16 +01:00