Enginex0 a0ee77202c fix(attestation): correct leaf CN casing and enforce keystore2 parameter policy ...

Leaf cert Subject CN used "KeyStore" (capital S) but AOSP
KeyGenParameterSpec uses "Keystore" (lowercase s). Fixed in both
the Rust native certgen and BouncyCastle paths.

Replicate keystore2's security_level.rs parameter validation for
software-generated keys: reject CREATION_DATETIME (output-only tag,
ResponseCode 20) and device ID attestation tags (CANNOT_ATTEST_IDS
-66) that real keystore2 blocks before they reach the HAL.

Also fix createErrorReply parcel write order — AIDL protocol expects
exception_code, message, error_code but we had message and error_code
swapped, causing malformed replies for positive error codes.

2026-03-10 14:23:33 +01:00

..

logging

fix(native-certgen): address production audit findings

2026-03-09 18:16:50 +01:00

attestation.rs

feat(native-certgen): implement ASN.1 attestation extension encoder

2026-03-09 15:32:31 +01:00

certbuilder.rs

fix(attestation): correct leaf CN casing and enforce keystore2 parameter policy

2026-03-10 14:23:33 +01:00

error.rs

fix(attestation): reject oversized challenges and rewrite cert DER encoding

2026-03-09 21:52:06 +01:00

keybox.rs

fix(native-certgen): address Phase 0-1 validation findings

2026-03-09 15:21:33 +01:00

keygen.rs

fix(native-certgen): address production audit findings

2026-03-09 18:16:50 +01:00

lib.rs

fix(native-certgen): address production audit findings

2026-03-09 18:16:50 +01:00

types.rs

fix(native-certgen): address production audit findings

2026-03-09 18:16:50 +01:00