jzy/TEESimulator-RS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(shim): revert nspace attestation key lookup

Browse Source 
Reverts d7dc5e0. The KEY_ID-domain alias-null branch targeted
duck-detector's timing-side-channel WARN, but the WARN persisted
in subsequent testing and the combined fix attempts pushed the
Tamper score from 4 to 14 with a new key-tamper detection on a
second detector. Roll back to the a7e7e45 baseline to investigate
from a clean state.
This commit is contained in:
Enginex0
2026-05-19 14:29:29 +01:00
parent d7dc5e0b63
commit 5f72acb1e7
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/src/main/java/org/matrix/TEESimulator/interception/keystore/shim/KeyMintSecurityLevelInterceptor.kt
+1 -2
View File
@@ -495,8 +495,7 @@ class KeyMintSecurityLevelInterceptor(
ConfigurationManager.shouldGenerate(callingUid) ||
(ConfigurationManager.shouldPatch(callingUid) && isAttestKeyRequest) ||
(attestationKey != null &&
(attestationKey.alias?.let { isAttestationKey(KeyIdentifier(callingUid, it)) }
?: attestationKeys.any { kid -> kid.uid == callingUid && generatedKeys[kid]?.nspace == attestationKey.nspace }))
isAttestationKey(KeyIdentifier(callingUid, attestationKey.alias)))
val isAuto = ConfigurationManager.isAutoMode(callingUid)