Tricky Store is an Android module that modifies the certificate chain generated for Android key attestation.
The tool addresses the problem of Android devices failing key attestation checks by intercepting and modifying the keystore attestation chain. It works by hacking the leaf certificate on devices with functioning TEE, or falling back to certificate generation mode on devices where TEE is broken. Configuration is file-based: users place a hardware keybox.xml at a specified path to provide an unrevoked keybox, and customize target packages in target.txt to control which applications are affected. All configuration changes take effect immediately without requiring a reboot.
This module is suited for Android 10 and above. It is designed for users who need to modify attestation results for specific applications, particularly those dealing with devices that have broken TEE implementations. The tool provides per-package control through simple text-based configuration, allowing users to force either certificate generation or leaf hack mode on individual packages. The module will transition to closed-source in future versions.
The maintainers typically respond to new issues and pull requests within hours.
