Tested against KeyDetector and Key Attestation on OnePlus (Android 16) and Xiaomi Redmi 14C (Android 14).
- PADDING encoding — Fixed ASN.1 encoding of PADDING tag in attestation extension from individual
[6] INTEGERentries to[6] SET OF INTEGER, matching AOSPattestation_record.hschema. Broke all RSA key attestation since v4.6. - Operation error-path conformance — Software operations now track finalized state and return
INVALID_OPERATION_HANDLE (-28)on post-abort calls. Input length guard (32KB) returnsTOO_MUCH_DATAmatching AOSPoperation.rs. Passes KeyDetector's OperationErrorPathChecker. - updateAad support — Added
updateAadtoSoftwareOperationBinder, fixingAbstractMethodErroron Android 16 where the runtime Stub declares it abstract. - Algorithm inference —
createOperationnow infers algorithm from the stored key pair when operation params omit the ALGORITHM tag, matching AOSP behavior.