No, they’re absolutely not. Check out tricky store and play integrity fork to see how we’re faking a trusted environment on custom and rooted roms. You can pass new device integrity with a valid unrevoked keybox on A13+ and new strong on <A12.
It’s a new stage in the arms race for sure but it’s still possible to bypass until all of the keys used to sign keyboxes are revoked.
Stares at rooted A13+ phone passing 2/3 integrity checks
It’s possible, but it’s annoying.
Those are the wrong integrity checks
No, they’re absolutely not. Check out tricky store and play integrity fork to see how we’re faking a trusted environment on custom and rooted roms. You can pass new device integrity with a valid unrevoked keybox on A13+ and new strong on <A12.
It’s a new stage in the arms race for sure but it’s still possible to bypass until all of the keys used to sign keyboxes are revoked.