TEESimulator-RS

3 Commits

Author SHA1 Message Date

Author	SHA1	Message	Date
小潼 GitHub JingMatrix	205fda43ba	Intercept updateSubcomponent to fix software key state inconsistency (#82 ) Apps attempting to update the certificate chain of a simulated software-based key (e.g., via KeyStore.setKeyEntry) currently trigger a KEY_NOT_FOUND error. This happens because the request is passed to the hardware Keystore daemon, which has no knowledge of keys existing only in the simulator's memory. To fix detecting points exploiting this inconsistency, we intercept the UPDATE_SUBCOMPONENT_TRANSACTION. If the target is a recognized virtual key, the simulator now: 1. Updates the in-memory certificate/chain metadata. 2. Returns NO_ERROR immediately to the caller. 3. Prevents the transaction from reaching the real hardware service. Co-authored-by: JingMatrix <jingmatrix@gmail.com>	2026-01-23 17:53:34 +01:00
小潼 GitHub JingMatrix	d77508d0c1	Enforce attestation challenge length limit (#70 ) Throws IllegalArgumentException if the challenge exceeds 128 bytes, per Android specs. Also fixes a duplicate assignment typo in KeystoreInterceptor. Reference: https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.Builder#setAttestationChallenge(byte[]) Co-authored-by: JingMatrix <jingmatrix@gmail.com>	2026-01-20 19:00:48 +01:00
小潼andGitHub	f76a4dd977	Correctly handle `deleteKey` for software keys (#42 ) This resolves an issue introduced in `6193da0` where a `deleteKey` transaction for a software-generated key was incorrectly passed through to the hardware keystore. Since the hardware is unaware of such keys, this results in inconsistent state management. The success reply is formatted correctly without a result code, per the AIDL interface specification. Reference: https://cs.android.com/android/platform/superproject/main/+/main:out/soong/.intermediates/system/hardware/interfaces/keystore2/aidl/android.system.keystore2-V6-java-source/gen/android/system/keystore2/IKeystoreSecurityLevel.java;l=406	2025-12-04 20:01:16 +01:00

205fda43ba

Intercept updateSubcomponent to fix software key state inconsistency (#82 )

Apps attempting to update the certificate chain of a simulated software-based key (e.g., via KeyStore.setKeyEntry) currently trigger a KEY_NOT_FOUND error. This happens because the request is passed to the hardware Keystore daemon, which has no knowledge of keys existing only in the simulator's memory.

To fix detecting points exploiting this inconsistency, we intercept the UPDATE_SUBCOMPONENT_TRANSACTION. If the target is a recognized virtual key, the simulator now:
1. Updates the in-memory certificate/chain metadata.
2. Returns NO_ERROR immediately to the caller.
3. Prevents the transaction from reaching the real hardware service.

Co-authored-by: JingMatrix <jingmatrix@gmail.com>

2026-01-23 17:53:34 +01:00

d77508d0c1

Enforce attestation challenge length limit (#70 )

Throws IllegalArgumentException if the challenge exceeds 128 bytes, per Android specs. Also fixes a duplicate assignment typo in KeystoreInterceptor.

Reference: https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.Builder#setAttestationChallenge(byte[])

Co-authored-by: JingMatrix <jingmatrix@gmail.com>

2026-01-20 19:00:48 +01:00

小潼andGitHub

f76a4dd977

Correctly handle deleteKey for software keys (#42 )

This resolves an issue introduced in 6193da0 where a `deleteKey` transaction for a software-generated key was incorrectly passed through to the hardware keystore. Since the hardware is unaware of such keys, this results in inconsistent state management.

The success reply is formatted correctly without a result code, per the AIDL interface specification.

Reference: https://cs.android.com/android/platform/superproject/main/+/main:out/soong/.intermediates/system/hardware/interfaces/keystore2/aidl/android.system.keystore2-V6-java-source/gen/android/system/keystore2/IKeystoreSecurityLevel.java;l=406

2025-12-04 20:01:16 +01:00