Post #2567

It seems the uptick of leaked keyboxes has finally caught Google's ire: I've seen a number of keyboxes leak online, and they're being used to defeat hardware attestation signals used by the Google Play Integrity API. Basically, these leaked keys let devices with unlocked bootloaders act as if they're locked, which is normally nearly impossible to do because of hardware attestation. To rectify this, Google is revoking these keys, but this may impact some regular end users whose devices will be unable to run certain apps. Google says it's working with impacted OEMs to update these keyboxes so users won't be impacted, but I suspect this isn't the end of these leaks.