JingMatrix/TEESimulator

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2307 stars · 294 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TEESimulator is an Android module that defeats hardware-backed key attestation by running AOSP's reference KeyMint trusted application inside the keystore daemon, signing attestations with a user-provided keybox. It selectively intercepts attestation requests for targeted apps while leaving all other keys on the device's real hardware TEE.

Use cases

• pass Play Integrity checks on a rooted Android device
• simulate hardware-backed key attestation in software
• sign Android key attestation certificates with a custom keybox
• bypass key attestation for specific apps while keeping hardware keys intact
• spoof device identity and patch levels in attestation chains
• make software keys look like TEE-generated keys

When to choose

• you need per-app control over which apps receive simulated vs real hardware attestation
• you want internally consistent attestation certificates generated the same way a real TEE would
• you need profile-based configuration with different keyboxes and device identities per app
• you want a fail-safe setup where a missing keybox makes the module inert

When to avoid

• you have no valid keybox to sign attestations with
• you need to spoof the verified boot state or root of trust, which is deliberately not configurable
• you run Android versions older than 10
• you want a simple certificate-patching approach rather than an in-daemon KeyMint simulation

Facets

plugin · maturity active

security cryptography middleware android-tools security privacy cpp magisk-module key-attestation play-integrity keymint tee-simulation keystore root-detection-bypass tricky-store android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="JingMatrix/TEESimulator")