From 806ec26a0325933fed4cff70a97e989379f9797e Mon Sep 17 00:00:00 2001 From: Enginex0 Date: Mon, 16 Mar 2026 22:07:56 +0100 Subject: [PATCH] docs(release): bump to v4.5 with detection hardening changelog --- app/build.gradle.kts | 2 +- module/changelog.md | 10 ++++++++++ module/update.json | 6 +++--- 3 files changed, 14 insertions(+), 4 deletions(-) diff --git a/app/build.gradle.kts b/app/build.gradle.kts index 19575ad..b9efb72 100644 --- a/app/build.gradle.kts +++ b/app/build.gradle.kts @@ -29,7 +29,7 @@ val gitExecutor = objects.newInstance(GitExecutor::class.java) val gitCommitCount = gitExecutor.execute("git rev-list HEAD --count", rootDir).toInt() val gitCommitHash = gitExecutor.execute("git rev-parse --verify --short HEAD", rootDir) -val verName = "v4.4" +val verName = "v4.5" android { namespace = "org.matrix.TEESimulator" diff --git a/module/changelog.md b/module/changelog.md index 97b9ee4..c380d26 100644 --- a/module/changelog.md +++ b/module/changelog.md @@ -1,3 +1,13 @@ +## TEESimulator v4.5: Detection Hardening + +Tested against [KeyDetector](https://github.com/XiaoTong6666/KeyDetector) (23-check attestation validator). All keystore-level checks now pass. + +- **Key deletion consistency** — After deleting a software-generated key, `getKeyEntry` now correctly returns `KEY_NOT_FOUND` instead of falling through to a stale live-patch fallback. Fixes binder consistency checks that detect ghost key responses. +- **generateKey timing normalization** — Software key generation RTT now matches real TEE latency profile (Gaussian distribution, mean=55ms, floor=15ms). Previously completed in ~4ms, which is an immediate timing side-channel. +- **Delete cleanup scope** — `deleteKey` now clears all cached state (patched chains, attestation keys) regardless of whether the key was software or hardware-generated. + +--- + ## TEESimulator v4.4: AOSP Conformance - **Binder error reply format** — Aligned EX_SERVICE_SPECIFIC wire layout with AOSP Status.cpp, including the remote stack trace header field. diff --git a/module/update.json b/module/update.json index 3b215a0..d40981b 100644 --- a/module/update.json +++ b/module/update.json @@ -1,6 +1,6 @@ { - "version": "v4.4", - "versionCode": 109, - "zipUrl": "https://github.com/Enginex0/TEESimulator/releases/download/v4.4/TEESimulator-v4.4-Release.zip", + "version": "v4.5", + "versionCode": 111, + "zipUrl": "https://github.com/Enginex0/TEESimulator/releases/download/v4.5/TEESimulator-v4.5-Release.zip", "changelog": "https://raw.githubusercontent.com/Enginex0/TEESimulator/main/module/changelog.md" }