Tested against KeyDetector (23-check attestation validator). All keystore-level checks now pass.
- Key deletion consistency — After deleting a software-generated key,
getKeyEntrynow correctly returnsKEY_NOT_FOUNDinstead of falling through to a stale live-patch fallback. Fixes binder consistency checks that detect ghost key responses. - generateKey timing normalization — Software key generation RTT now matches real TEE latency profile (Gaussian distribution, mean=55ms, floor=15ms). Previously completed in ~4ms, which is an immediate timing side-channel.
- Delete cleanup scope —
deleteKeynow clears all cached state (patched chains, attestation keys) regardless of whether the key was software or hardware-generated.