Fix/align keystore2 interception model#157

Open

MhmRdd wants to merge 56 commits intoJingMatrix:mainfrom

MhmRdd:fix/align-keystore2-interception-model

Commits on Mar 18, 2026

Fix USER_ID authorization security level to match AOSP keystore2
MhmRdd
committed
Implement updateAad for software-backed crypto operations
MhmRdd
committed
Patch authorizations alongside certificate chains in PATCH mode
MhmRdd
committed
Derive certificate signature algorithm from signing key, not subject key
MhmRdd
committed
Add operation lifecycle tracking, concurrency guard, and input limits
MhmRdd
committed
Patch certificates and authorizations for imported keys
MhmRdd
committed
Populate CreateOperationResponse.parameters for GCM operations
MhmRdd
committed
Use ServiceSpecificException with AOSP error codes for operation errors
MhmRdd
committed
Fix default certificate subject to match KeyMint reference
MhmRdd
committed
Fix certificate validity defaults and RSA exponent null safety
MhmRdd
committed
Only include ATTESTATION_APPLICATION_ID when challenge is present
MhmRdd
committed
Fix attestation key override to update nspace and patch authorizations
MhmRdd
committed
Add .gitattributes to enforce LF line endings for shell scripts
MhmRdd
committed
Derive KEY_SIZE from EC_CURVE when not explicitly provided
MhmRdd
committed
Validate operation purpose and reject caller-provided CREATION_DATETIME
MhmRdd
committed
Fix TOO_MUCH_DATA error code to 21 and add missing error constants
MhmRdd
committed
Parse enforcement tags from key generation parameters
MhmRdd
committed
Include enforcement tags in attestation teeEnforced list
MhmRdd
committed
Implement AOSP enforcements.rs authorize_create for software operations
MhmRdd
committed
Handle Domain.APP in createOperation for software-generated keys
MhmRdd
committed
Fix UNSUPPORTED_PURPOSE for EC VERIFY/ENCRYPT and USAGE_COUNT_LIMIT
MhmRdd
committed
Remove verbose AOSP references and test-label comments
MhmRdd
committed
Reject device ID attestation tags, fix operation param merging and usage tracking
MhmRdd
committed
Filter intercepted transaction codes at native level to reduce latency
MhmRdd
committed
Check READ_PRIVILEGED_PHONE_STATE before rejecting device ID attestation
MhmRdd
committed
Use hardcoded AndroidSystem AAID for system and root UIDs
MhmRdd
committed
Add android and com.android.shell to default target list
MhmRdd
committed
Compute unique ID when INCLUDE_UNIQUE_ID is present
MhmRdd
committed
Skip cert re-patching for keys updated via updateSubcomponent
MhmRdd
committed
Move enforcement tags to softwareEnforced and fix updateSubcomponent lookup
MhmRdd
committed
Check SELinux gen_unique_id and REQUEST_UNIQUE_ID_ATTESTATION for unique ID
MhmRdd
committed
Return proper TEE error codes on software generation failure
MhmRdd
committed

Commits on Mar 19, 2026