Commit Graph

  • 20603572f3 feat(attestation): add origin field and isAttestKey/isImportKey helpers Enginex0 2026-03-09 19:59:38 +01:00
  • 14786ecce0 feat(attestation): add origin field and isAttestKey/isImportKey helpers Enginex0 2026-03-09 19:59:38 +01:00
  • a781b29e0d fix(attestation): correct module_hash to match AOSP Keystore2 Enginex0 2026-03-09 19:59:30 +01:00
  • 41b9cc8f10 fix(attestation): correct module_hash to match AOSP Keystore2 Enginex0 2026-03-09 19:59:30 +01:00
  • f781f61f44 fix(native-certgen): address production audit findings Enginex0 2026-03-09 18:16:50 +01:00
  • 6df266b688 fix(native-certgen): address production audit findings Enginex0 2026-03-09 18:16:50 +01:00
  • 6aba82edb1 build(native-certgen): wire Rust crate into Gradle pipeline Enginex0 2026-03-09 16:46:32 +01:00
  • 32cfcb3ece build(native-certgen): wire Rust crate into Gradle pipeline Enginex0 2026-03-09 16:46:32 +01:00
  • 7f3d72ba20 fix(pki): align JNI signatures between Kotlin and Rust Enginex0 2026-03-09 16:37:52 +01:00
  • 727b32f6b0 fix(pki): align JNI signatures between Kotlin and Rust Enginex0 2026-03-09 16:37:52 +01:00
  • e82abe1ce9 feat(pki): integrate native cert gen with BouncyCastle fallback Enginex0 2026-03-09 16:23:09 +01:00
  • ac9641ed2a feat(pki): integrate native cert gen with BouncyCastle fallback Enginex0 2026-03-09 16:23:09 +01:00
  • 95724116b7 feat(native-certgen): implement JNI bridge with panic-safe entry points Enginex0 2026-03-09 16:13:41 +01:00
  • c87759c6c3 feat(native-certgen): implement JNI bridge with panic-safe entry points Enginex0 2026-03-09 16:13:41 +01:00
  • d335809682 fix(native-certgen): address Phase 3 validation findings Enginex0 2026-03-09 16:08:07 +01:00
  • 76b18706f1 fix(native-certgen): address Phase 3 validation findings Enginex0 2026-03-09 16:08:07 +01:00
  • 0b680c578e feat(native-certgen): implement X.509 certificate chain builder Enginex0 2026-03-09 15:55:15 +01:00
  • e76f5115e0 feat(native-certgen): implement X.509 certificate chain builder Enginex0 2026-03-09 15:55:15 +01:00
  • 98f7e0f08b feat(native-certgen): implement logging subsystem Enginex0 2026-03-09 15:41:46 +01:00
  • 0725aed094 feat(native-certgen): implement logging subsystem Enginex0 2026-03-09 15:41:46 +01:00
  • e8672459e0 feat(native-certgen): implement ASN.1 attestation extension encoder Enginex0 2026-03-09 15:32:31 +01:00
  • 9d61af6ce8 feat(native-certgen): implement ASN.1 attestation extension encoder Enginex0 2026-03-09 15:32:31 +01:00
  • 9dc8ec1530 fix(native-certgen): address Phase 0-1 validation findings Enginex0 2026-03-09 15:21:33 +01:00
  • 7863e8dd17 fix(native-certgen): address Phase 0-1 validation findings Enginex0 2026-03-09 15:21:33 +01:00
  • 5fcd4ab7b6 feat(native-certgen): implement keybox DER certificate chain parser Enginex0 2026-03-09 15:09:29 +01:00
  • f840eed42b feat(native-certgen): implement keybox DER certificate chain parser Enginex0 2026-03-09 15:09:29 +01:00
  • 30d5188c69 feat(native-certgen): scaffold Rust crate with foundation types and keygen Enginex0 2026-03-09 15:05:25 +01:00
  • 4c7f0a09ea feat(native-certgen): scaffold Rust crate with foundation types and keygen Enginex0 2026-03-09 15:05:25 +01:00
  • 770a4f0134 Derive boot and vendor patch levels from system prop when system=prop Enginex0 2026-02-06 21:10:31 +01:00
  • 4971f7b4a5 Derive boot and vendor patch levels from system prop when system=prop Enginex0 2026-02-06 21:10:31 +01:00
  • bb28a8d30c Rate-limit per-UID hardware keygen and harden importKey eviction Enginex0 2026-02-06 21:10:20 +01:00
  • 9ea39f0545 Rate-limit per-UID hardware keygen and harden importKey eviction Enginex0 2026-02-06 21:10:20 +01:00
  • 3e2aaa2ff0 Cap interceptable binder payload size at 256KB Enginex0 2026-02-06 21:09:55 +01:00
  • c332f8ad0d Cap interceptable binder payload size at 256KB Enginex0 2026-02-06 21:09:55 +01:00
  • ff88543c98 Add file-level locking to prevent race conditions in key persistence Enginex0 2026-02-04 21:28:43 +01:00
  • d76e6abeed Add file-level locking to prevent race conditions in key persistence Enginex0 2026-02-04 21:28:43 +01:00
  • c99a2ab302 Reject oversized aliases to prevent binder buffer exhaustion Enginex0 2026-02-04 21:28:51 +01:00
  • 142fe7bf13 Reject oversized aliases to prevent binder buffer exhaustion Enginex0 2026-02-04 21:28:51 +01:00
  • b33e1ae3ac fix(pki): strip HTML comments from PEM blocks before parsing Enginex0 2026-02-02 18:43:41 +01:00
  • e41a679928 fix(pki): strip HTML comments from PEM blocks before parsing Enginex0 2026-02-02 18:43:41 +01:00
  • fc64789dc3 fix(config): prevent FileObserver NPE on config file deletion Enginex0 2026-02-02 18:43:27 +01:00
  • 209d5c8902 fix(config): prevent FileObserver NPE on config file deletion Enginex0 2026-02-02 18:43:27 +01:00
  • 945f3cac79 Integrate key persistence with interceptors Enginex0 2026-02-03 05:24:32 +01:00
  • 3817b37e18 Integrate key persistence with interceptors Enginex0 2026-02-03 05:24:32 +01:00
  • 4e50a70366 Add generated key persistence layer Enginex0 2026-02-03 05:24:18 +01:00
  • 53ae250fc7 Add generated key persistence layer Enginex0 2026-02-03 05:24:18 +01:00
  • 8b00d7985f feat(module): add supervisor daemon with leak-safe restart and lifecycle scripts Enginex0 2026-02-07 00:47:04 +01:00
  • 34ad97366e feat(module): add supervisor daemon with leak-safe restart and lifecycle scripts Enginex0 2026-02-07 00:47:04 +01:00
  • f50004d9a5 docs(release): write v3.2 changelog and point update.json to fork v3.2 Enginex0 2026-02-06 23:50:30 +01:00
  • 8c10cf71ce chore(module): add co-author credit, verbose action output, point updates to fork Enginex0 2026-02-06 23:31:03 +01:00
  • 1ed3d9ad6e fix(install): extract action.sh and uninstall.sh during module install Enginex0 2026-02-06 23:22:16 +01:00
  • 4107127506 chore(build): bump version to v3.2 Enginex0 2026-02-06 23:17:20 +01:00
  • e36c4e351c feat(module): add action.sh and uninstall.sh lifecycle scripts Enginex0 2026-02-06 22:34:02 +01:00
  • 1546c3bba0 Derive boot and vendor patch levels from system prop when system=prop Enginex0andGKI Builder 2026-02-06 21:10:31 +01:00
  • 81a8ce0c60 Rate-limit per-UID hardware keygen and harden importKey eviction Enginex0andGKI Builder 2026-02-06 21:10:20 +01:00
  • 7c4df3e237 Cap interceptable binder payload size at 256KB Enginex0andGKI Builder 2026-02-06 21:09:55 +01:00
  • 1ac08411be Revert "Add X.509 certificate extensions for RFC 5280 compliance" Enginex0andGKI Builder 2026-02-06 00:58:54 +01:00
  • a11a5e41a2 Add X.509 certificate extensions for RFC 5280 compliance Enginex0andGKI Builder 2026-02-04 21:28:36 +01:00
  • c367aa5efc Add file-level locking to prevent race conditions in key persistence Enginex0andGKI Builder 2026-02-04 21:28:43 +01:00
  • 88781ff31d Delegate key re-persistence to GeneratedKeyPersistence layer Enginex0andGKI Builder 2026-02-04 21:28:57 +01:00
  • 409fb5fcc3 Reject oversized aliases to prevent binder buffer exhaustion Enginex0andGKI Builder 2026-02-04 21:28:51 +01:00
  • 0cf8f70544 fix(pki): strip HTML comments from PEM blocks before parsing Enginex0andGKI Builder 2026-02-02 18:43:41 +01:00
  • 7ecea09ec6 fix(app): add global uncaught exception handler for clean restart Enginex0andGKI Builder 2026-02-02 18:43:34 +01:00
  • 887c5fc666 fix(config): prevent FileObserver NPE on config file deletion Enginex0andGKI Builder 2026-02-02 18:43:27 +01:00
  • ce0ca18d98 Preserve generated keys across keybox rotation Enginex0andGKI Builder 2026-02-03 05:24:42 +01:00
  • fa28e9fc71 Integrate key persistence with interceptors Enginex0andGKI Builder 2026-02-03 05:24:32 +01:00
  • c3822197b1 Add generated key persistence layer Enginex0andGKI Builder 2026-02-03 05:24:18 +01:00
  • f276806096 fix(native): block attestation leak when interceptor service is dead Enginex0andGKI Builder 2026-02-02 18:43:13 +01:00
  • 9aa4a33c5e Add fork-based supervisor daemon for instant restart Enginex0 2026-02-05 23:57:24 +01:00
  • e7444bb62a Set correct certificate KeyUsage based on KeyPurpose (#119) Enginex0andGitHub 2026-02-04 09:07:21 +01:00
  • 593bcfef83 Set correct certificate KeyUsage based on KeyPurpose (#119) Enginex0andGitHub 2026-02-04 09:07:21 +01:00
  • 6fdf5c766b Resolve reference leak and warnings in binder interception (#122) JingMatrixandGitHub 2026-02-04 09:03:51 +01:00
  • 5e68cb5f4b Resolve reference leak and warnings in binder interception (#122) JingMatrixandGitHub 2026-02-04 09:03:51 +01:00
  • 33397f244c Release TEESimulator 3.1 JingMatrix 2026-01-31 22:49:29 +01:00
  • a1bb3bbfa3 Release TEESimulator 3.1 v3.1 JingMatrix 2026-01-31 22:49:29 +01:00
  • 23bef3f88e Correct misunderstanding of takeIf execution order JingMatrix 2026-01-31 12:51:09 +01:00
  • e13adb925d Correct misunderstanding of takeIf execution order JingMatrix 2026-01-31 12:51:09 +01:00
  • 129cec06bf Support key enumeration via listEntries interception (#84) 2026-01-31 18:37:25 +08:00
  • c3f8f087a6 Support key enumeration via listEntries interception (#84) 2026-01-31 18:37:25 +08:00
  • 54f68b99b1 Move attestation challenge check to certificate generation JingMatrix 2026-01-30 17:07:14 +01:00
  • 51f32b9db2 Move attestation challenge check to certificate generation JingMatrix 2026-01-30 17:07:14 +01:00
  • 8649b8b928 Handle swapped attestation lists on certain Android 11 devices (#108) JingMatrix 2026-01-30 18:16:13 +01:00
  • d60ad8fe47 Handle swapped attestation lists on certain Android 11 devices (#108) JingMatrix 2026-01-30 18:16:13 +01:00
  • 68af5ac680 Correct alias parsing in KeystoreInterceptor (#106) JingMatrix 2026-01-29 18:24:21 +01:00
  • 9a1fbe8c79 Correct alias parsing in KeystoreInterceptor (#106) JingMatrix 2026-01-29 18:24:21 +01:00
  • 10d673b606 Add SELinux rules for libTEESimulator.so loading (#104) JingMatrixandGitHub 2026-01-29 15:15:56 +01:00
  • 68b660dfe1 Add SELinux rules for libTEESimulator.so loading (#104) JingMatrixandGitHub 2026-01-29 15:15:56 +01:00
  • b5251c0418 Fix multiple crashes and race conditions on Android 12 (#99) JingMatrixandGitHub 2026-01-29 15:00:09 +01:00
  • 068188503c Fix multiple crashes and race conditions on Android 12 (#99) JingMatrixandGitHub 2026-01-29 15:00:09 +01:00
  • 1d2c60c510 Prevent recursion when configured to intercept system UID (#100) JingMatrix 2026-01-28 18:04:02 +01:00
  • 1bbc50d138 Prevent recursion when configured to intercept system UID (#100) JingMatrix 2026-01-28 18:04:02 +01:00
  • b997304f02 Remove SELinux context manipulations during injection (#87) JingMatrix 2026-01-28 15:19:07 +01:00
  • d2492df02e Remove SELinux context manipulations during injection (#87) JingMatrix 2026-01-28 15:19:07 +01:00
  • 5e394f1b72 Fix ARM ptrace compatibility and improve remote call safety (#94) JingMatrix 2026-01-28 14:06:38 +01:00
  • e7d7b21daa Fix ARM ptrace compatibility and improve remote call safety (#94) JingMatrix 2026-01-28 14:06:38 +01:00
  • b1f3b5d28d Fix cache consistency on key overwrite (#97) JingMatrixandGitHub 2026-01-28 13:50:05 +01:00
  • c29bc35a36 Fix cache consistency on key overwrite (#97) JingMatrixandGitHub 2026-01-28 13:50:05 +01:00
  • e9d7321b5f Fix crash by avoiding hardcoded index for moduleHash JingMatrix 2026-01-26 23:26:52 +01:00
  • 549b5cecc2 Fix crash by avoiding hardcoded index for moduleHash JingMatrix 2026-01-26 23:26:52 +01:00
  • 4097ffde6a Fix x86_64 injection: Red Zone adjustment and fallback logic (#91) JingMatrix 2026-01-26 23:12:52 +01:00