Align Keystore2 Operation Interceptions#171

Open

XiaoTong6666 wants to merge 15 commits into

JingMatrix:mainfrom

XiaoTong6666:bak4

Commits on Mar 24, 2026

Parse enforcement tags and add software operation updateAad scaffolding

MhmRdd
authored and
XiaoTong6666
committed
Add operation lifecycle tracking, concurrency guard, and input limits

MhmRdd
authored and
XiaoTong6666
committed
Populate CreateOperationResponse.parameters for GCM operations

MhmRdd
authored and
XiaoTong6666
committed
Use ServiceSpecificException with AOSP error codes for operation errors

MhmRdd
authored and
XiaoTong6666
committed
Implement AOSP enforcements.rs authorize_create for software operations

MhmRdd
authored and
XiaoTong6666
committed
Handle Domain.APP in createOperation for software-generated keys

MhmRdd
authored and
XiaoTong6666
committed
Filter intercepted transaction codes and gate device ID attestation checks

MhmRdd
authored and
XiaoTong6666
committed
Reject AGREE_KEY for all non-EC algorithms with UNSUPPORTED_PURPOSE

MhmRdd
authored and
XiaoTong6666
committed
Support symmetric key generation (AES, HMAC) in software mode

MhmRdd
authored and
XiaoTong6666
committed
Align KeyMetadata authorizations and operation semantics with AOSP

MhmRdd
authored and
XiaoTong6666
committed
Handle IV/nonce, OAEP, GCM tags, CTR mode, and ECDH in software operations

MhmRdd
authored and
XiaoTong6666
committed
Fix silent error paths, challenge error code, and null handling

MhmRdd
authored and
XiaoTong6666
committed
Add dir class to sepolicy and crash safety for binder interceptors

MhmRdd
authored and
XiaoTong6666
committed

Commits on Mar 30, 2026