v1.0.0

OmegaRelay v1.0.0 — Remote Hardware Attestation Relay

Forward real hardware key attestation (6-cert Google chain) from a BL-locked device to a BL-unlocked device over WebSocket.

将 BL 锁定设备的真实硬件 attestation（6 段 Google 证书链）通过 WebSocket 转发到 BL 解锁设备。

Downloads / 下载

File	Description
TEESimulator-RS-v6.0.0-165-Release.zip	Consumer KSU/Magisk module (flash on Device A, BL unlocked)
OmegaRelay-Provider-v1.0.0-signed.apk	Provider APK (install on Device B, BL locked)

What's included / 包含内容

• Remote attestation relay: Device A requests attestation → relay server → Device B signs with real TEE → 6-cert chain returned
• Duck Detector fix: TEE Simulator generate-mode fingerprint no longer detected (Tamper score ≤ 4)
• Open cleartext support: Provider APK allows ws:// to any address (no IP whitelist needed)
• VPS one-click deploy: sudo OMEGA_PSK="..." bash OmegaRelay/vps/install.sh

Setup / 使用方法

1. Deploy relay server on VPS (see README)
2. Install Provider APK on BL-locked device, configure URL + PSK
3. Flash Consumer module on BL-unlocked device, edit omega-relay.conf, reboot
4. Verify with Key Attestation app → "Google Hardware Attestation Root Certificate", chain len=6

Known limitations / 已知限制

• ⚠️ Cannot pass Google Play Integrity (Google backend side-channel detection)
• ✅ Passes: vvb2060 KeyAt