Enginex0 4a96491e63 fix(attestation): correct leaf CN casing and enforce keystore2 parameter policy ...

Leaf cert Subject CN used "KeyStore" (capital S) but AOSP
KeyGenParameterSpec uses "Keystore" (lowercase s). Fixed in both
the Rust native certgen and BouncyCastle paths.

Replicate keystore2's security_level.rs parameter validation for
software-generated keys: reject CREATION_DATETIME (output-only tag,
ResponseCode 20) and device ID attestation tags (CANNOT_ATTEST_IDS
-66) that real keystore2 blocks before they reach the HAL.

Also fix createErrorReply parcel write order, AIDL protocol expects
exception_code, message, error_code but we had message and error_code
swapped, causing malformed replies for positive error codes.

2026-03-10 14:23:33 +01:00

..

.cargo

feat(native-certgen): scaffold Rust crate with foundation types and keygen

2026-03-09 15:05:25 +01:00

src

fix(attestation): correct leaf CN casing and enforce keystore2 parameter policy

2026-03-10 14:23:33 +01:00

Cargo.lock

fix(attestation): reject oversized challenges and rewrite cert DER encoding

2026-03-09 21:52:06 +01:00

Cargo.toml

fix(attestation): reject oversized challenges and rewrite cert DER encoding

2026-03-09 21:52:06 +01:00

rust-toolchain.toml

feat(native-certgen): scaffold Rust crate with foundation types and keygen

2026-03-09 15:05:25 +01:00