I am developing an app on android 10.0 sdk 29device.
I know KeyInfo.isInsideSecureHardware Returns ‘true‘ it means that key is stored inside of TEE. And the log returns true
However my device log says
07-24 16:15:14.992 2053 2053 I [email protected]: Fetching keymaster device name default
07-24 16:15:14.993 2053 2053 I [email protected]: Could not find any keystore module, using software-only implementation.
07-24 16:15:14.995 2053 2053 I ServiceManagement: Registered [email protected]::IKeymasterDevice/default (start delay of 148ms)
07-24 16:15:14.995 2053 2053 I ServiceManagement: Removing namespace from process name [email protected] to [email protected].
07-24 16:15:14.996 2053 2053 I [email protected]: Registration complete for [email protected]::IKeymasterDevice/default.
07-24 16:15:16.934 1971 1971 I hwservicemanager: getTransport: Cannot find entry [email protected]::IKeymasterDevice/default in either framework or device manifest.
07-24 16:15:16.945 2148 2148 I keystore: found [email protected]::IKeymasterDevice with interface name default and seclevel SOFTWARE
07-24 16:15:16.945 2148 2148 W keystore: No secure Keymaster implementation found, but device offers insecure Keymaster HAL. Using as default.
And there’s file created
/data/misc/keystore/user_0/.1000_chr_USRPKEY_mankey /data/misc/keystore/user_0/1000_USRPKEY_mankey
So I am very confused about this contradictory results.
Do you guys think TEE is activated?
As far as I know if the device is using TEE, key files shouldn’t be created in data/misc/keystore folder
New contributor
Daniel P is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.