Enginex0 f8bfa0dfd8 fix(attestation): align authorization list and cert extension with AOSP keystore2 semantics ...

toAuthorizations() was missing OS_VERSION, OS_PATCHLEVEL, VENDOR_PATCHLEVEL,
BOOT_PATCHLEVEL, CREATION_DATETIME, USER_ID, PADDING, and RSA_PUBLIC_EXPONENT
tags that real TEE-generated KeyMetadata always includes. EC_CURVE was also
hardcoded unconditionally, producing invalid authorizations for RSA keys.

Additionally, live-patched certificate chains in getKeyEntry weren't cached,
causing re-patching on every call with potentially different signatures.

Ports upstream JingMatrix/TEESimulator#148 and #150.

2026-03-16 23:01:28 +01:00

..

src/main

fix(attestation): align authorization list and cert extension with AOSP keystore2 semantics

2026-03-16 23:01:28 +01:00

build.gradle.kts

docs(release): bump to v4.5 with detection hardening changelog

2026-03-16 22:07:56 +01:00

proguard-rules.pro

build(native-certgen): wire Rust crate into Gradle pipeline

2026-03-09 16:46:32 +01:00