jzy/TEESimulator-RS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(spoof): add TEE op latency floor

Browse Source 
Attested keystore operations finishing faster than non-attested
ones on the same device is a timing inversion that detectors
score against TEE coherence. Floor TEE op latency at 4ms to
preserve the natural ordering.
This commit is contained in:
Enginex0
2026-05-19 08:04:05 +01:00
parent bba4a9ebfa
commit a7e7e454e7
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/src/main/java/org/matrix/TEESimulator/interception/keystore/shim/KeyMintSecurityLevelInterceptor.kt
+6 -1
View File
@@ -371,7 +371,11 @@ class KeyMintSecurityLevelInterceptor(
) )
} else parsedParams } else parsedParams
val opLatency = if (securityLevel == SecurityLevel.STRONGBOX) STRONGBOX_OP_LATENCY_FLOOR_MS else 0L val opLatency = when (securityLevel) {
SecurityLevel.STRONGBOX -> STRONGBOX_OP_LATENCY_FLOOR_MS
SecurityLevel.TRUSTED_ENVIRONMENT -> TEE_OP_LATENCY_FLOOR_MS
else -> 0L
}
val softwareOperation = SoftwareOperation(txId, generatedKeyInfo.keyPair, generatedKeyInfo.secretKey, effectiveParams, opLatency) val softwareOperation = SoftwareOperation(txId, generatedKeyInfo.keyPair, generatedKeyInfo.secretKey, effectiveParams, opLatency)
if (keyParams?.usageCountLimit != null) { if (keyParams?.usageCountLimit != null) {
@@ -933,6 +937,7 @@ class KeyMintSecurityLevelInterceptor(
private const val TEE_LATENCY_FLOOR_MS = 15L private const val TEE_LATENCY_FLOOR_MS = 15L
private const val STRONGBOX_KEYGEN_LATENCY_FLOOR_MS = 250L private const val STRONGBOX_KEYGEN_LATENCY_FLOOR_MS = 250L
private const val STRONGBOX_OP_LATENCY_FLOOR_MS = 80L private const val STRONGBOX_OP_LATENCY_FLOOR_MS = 80L
private const val TEE_OP_LATENCY_FLOOR_MS = 4L
private const val KEYMINT_TOO_MANY_OPERATIONS = -29 private const val KEYMINT_TOO_MANY_OPERATIONS = -29
private const val KEYMINT_CANNOT_ATTEST_IDS = -66 private const val KEYMINT_CANNOT_ATTEST_IDS = -66
private const val KEYMINT_UNKNOWN_ERROR = -1000 private const val KEYMINT_UNKNOWN_ERROR = -1000