Files
TrickyStore/README.md
2024-07-16 19:08:15 +08:00

63 lines
1.5 KiB
Markdown

# Tricky Store
A trick of keystore.
## Usage
1. Flash this module and reboot.
2. Put keybox.xml to /data/adb/tricky_store/keybox.xml .
3. Put target packages to /data/adb/tricky_store/target.txt (Optional).
4. Enjoy!
## keybox.xml
format:
```xml
<?xml version="1.0"?>
<AndroidAttestation>
<NumberOfKeyboxes>1</NumberOfKeyboxes>
<Keybox DeviceID="...">
<Key algorithm="ecdsa|rsa">
<PrivateKey format="pem">
-----BEGIN EC PRIVATE KEY-----
...
-----END EC PRIVATE KEY-----
</PrivateKey>
<CertificateChain>
<NumberOfCertificates>...</NumberOfCertificates>
<Certificate format="pem">
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</Certificate>
... more certificates
</CertificateChain>
</Key>...
</Keybox>
</AndroidAttestation>
```
## Build Vars Spoofing
If you can not pass strong integrity, you can try to enable build vars spoofing
by creating a file in `/data/adb/tricky_store/spoof_build_vars`.
Zygisk (or Zygisk Next) is needed for this feature to work.
## Leaf hack or fully generate
For target packages, TrickyStore will hack leaf certificate by default.
On TEE broken devices, this will not work. You can add a `!` after package name to enable fully
generate mode.
For example:
```
# target.txt
# leaf hack for KeyAttestation App
io.github.vvb2060.keyattestation
# fully generate for gms
com.google.android.gms!
```