Anyone with custom ROM/kernel able to check if TEE still is working?
There is a new bitcoin mobile wallet in beta that utilizes the TEE (Trusted Execution Environment). In short it will achieve the same level of security as having a separate hardware wallet, i.e. secure against malware. I have tried it out and it is working beautifully on my pingpong rooted GS6 920F. However, I am unable to find any word on if tripping knox or using a custom ROM/kernel will disable this functionality.
If anyone with for example XtreStoLite and/or UniKernel/UniBase could give it a try and report back I would be really grateful.
The link to the app is available in this post or additionally you could look in you root folder and check for the following three folders/files:
- Verify that you have a /dev/mobicore device. It means the TEE did boot
- Verify that you have a /data/app/mcRegistry directory with some files in it. It means the TEE personalization should be available.
- Verify that /system/lib/libtlc_tima_tui.so is present. If not, your TEE doesn't support the Trusted UI and can't be used for the first beta. Probably later.
Posted Aug 25, 2015, 1:40 PM UTC · edited
53
Interesting: I'm not on a custom ROM/Kernel, but instead my S6 is still on 5.0.1, rooted with PingPong root. When I originally rooted, I froze a ton of 'unnecessary' apps, and now the Ledger Wallet app says TEE is not available. I updated my Security Policy but it still gives me that error.
Btw, I have the /dev/mobicore and libtlc_tima_tui present, but my mcRegistry folder is empty.
I also had a empty McRegistry folder and did not initially manage to get the ledger app to connect to the TEE. However updating my security policy did fix that. After successfully initializing the wallet app three files appeared in the folder so I think it is fine that it is empty, as long as it's present.
It could be that your old software version is the culprit, or then Samsung is slow in rolling out the security policy for everyone.