Compare commits

...
2 Commits
Author SHA1 Message Date
Enginex0 18724cf40d docs(changelog): add AUTO mode banking app fix to v6.0.0 notes 2026-03-31 18:59:28 +01:00
Enginex0 1b7800345d fix(config): restore AUTO mode resolution for bare target entries
v6.0 changed bare target.txt entries from AUTO to GENERATE, breaking
apps like BHIM that need TEE-backed attestation keys. Restore AUTO as
default and resolve it at config level (PATCH if TEE works, GENERATE
if not) to bypass the non-deterministic raceTeePatch path.
2026-03-31 18:53:18 +01:00
2 changed files with 8 additions and 2 deletions
@@ -7,6 +7,7 @@ import android.os.IBinder
import android.os.ServiceManager import android.os.ServiceManager
import java.io.File import java.io.File
import java.util.concurrent.ConcurrentHashMap import java.util.concurrent.ConcurrentHashMap
import org.matrix.TEESimulator.attestation.DeviceAttestationService
import org.matrix.TEESimulator.logging.SystemLogger import org.matrix.TEESimulator.logging.SystemLogger
import org.matrix.TEESimulator.pki.KeyBoxManager import org.matrix.TEESimulator.pki.KeyBoxManager
@@ -102,7 +103,7 @@ object ConfigurationManager {
when (packageModes[pkg]) { when (packageModes[pkg]) {
Mode.GENERATE -> return Mode.GENERATE Mode.GENERATE -> return Mode.GENERATE
Mode.PATCH -> return Mode.PATCH Mode.PATCH -> return Mode.PATCH
Mode.AUTO -> return Mode.AUTO Mode.AUTO -> return if (DeviceAttestationService.isTeeFunctional) Mode.PATCH else Mode.GENERATE
null -> continue null -> continue
} }
} }
@@ -165,7 +166,7 @@ object ConfigurationManager {
newKeyboxes[pkg] = currentKeybox newKeyboxes[pkg] = currentKeybox
} }
else -> { else -> {
newModes[trimmedLine] = Mode.GENERATE newModes[trimmedLine] = Mode.AUTO
newKeyboxes[trimmedLine] = currentKeybox newKeyboxes[trimmedLine] = currentKeybox
} }
} }
+5
View File
@@ -13,6 +13,11 @@ Repository consolidation release. All tee-rebuild work merged as the new main br
- Oversized transactions routed to software gen instead of crashing - Oversized transactions routed to software gen instead of crashing
- Operation-time params (BLOCK_MODE, PADDING, DIGEST) passed through to CipherPrimitive - Operation-time params (BLOCK_MODE, PADDING, DIGEST) passed through to CipherPrimitive
### Banking App Compatibility
- Bare `target.txt` entries now default to AUTO mode, resolved at config level to PATCH (working TEE) or GENERATE (broken TEE)
- Fixes BHIM and similar banking apps that require TEE-backed attestation keys
- Restores v5.0 behavior where AUTO was resolved before the interceptor dispatch, avoiding the non-deterministic `raceTeePatch` path
### Infrastructure ### Infrastructure
- Version scheme changed to semver (v6.0.0) - Version scheme changed to semver (v6.0.0)
- Repository moved to TEESimulator-RS as canonical source - Repository moved to TEESimulator-RS as canonical source