Bank apps (RSA?) crashes on Mediatek MT6795 with Android 5.1 / Gionee E8 | Allview X2 - Android Q&A, Help & Troubleshooting

Hello, I need help...
Searched and read a lot of last days, can't figure anything about my problem.
Device:
* Allview X2 Xtreme (Aka BLU Pure XL, Gionee Elife E8, ...)
** Mediatek MT6795 a'ka Helio x10
** 3GB RAM, 64GB internal
* Android 5.1, stock V5894 with security patch: 2016-02-01 (yeah, that sucks), rooted, Kernel: 3.10.72+
* HW X2_Soul_Xtreme_Mainboard_P3.1
* Using Lucky Patcher, AdAway, Busybox... typical apps with root.
The problem; TL;DR
Many banking apps crashes or cannot connect with bank on my device. It's not related with bank, not related with my SIM cards or SDCard. Not even related with userdata or system/boot image on device.
Any other applications which I tried and using over years works fine.
Probably hardware problem, but I can't figure it out.
The problem, whole story
About month ago mBank app (Polish bank) just crashed for me after making payment. I couldn't log in into it after typing pin. I though it's Bank API problem and i just waited 2-3 days, without changes, so I finally I've opened complaint - still they not replied to me!!
Ofc meanwhile I've tried to reset and pair application with account - no luck, still doesn't work.
Strange was that I was able to log on wife's S9+. However I still though it's bank problem with my specified smartphone - maybe IMEI identification or something, made a uniqueness violations or something in their databases or other stupid ideas... I'm also developer, so I have some guesses in my head.
Ofc before crash I did not made any changes in OS, not installed any new app or made breaking changes in configs... typical use. App works over year, sun still shines...
I begin to search on my own:
I was unable to debug or find any logs for mBank app.
My holiday approximates so I was started to thinking about new bank... and then I've tried "Moje ING" (ING Nederlands bank in Poland).. without account there's "demo mode"... tap: "You're device might be rooted bla bla bla. continue". -- "Cannot download data, try again". Hmm... It doesn't work on my phone, strange, because on wife's works.. damn.
Yet another application: "IKO" (PKO Polish Bank app) and demo works well. Uff... quite soothing... but it's demo, w/ever. Maybe ING app is broken on roots (S9+ wife without root).
Another app: "Kantor walutowy Alior Bank" (Alior's Bank Exchange)... crash just on start, however on that app I was able to tap "send report", and then what I saw in stacktrace: "Runtime Exception: Not able to create key". Sh1et, that's bother me totally.
I've decompiled class with that thrown, not analyzed it to much, but package is related to RSA and KeyPairs generators.
I've finally installed only other OS available to my device: CM 13 on Android 6. On clean system "Moje ING" not even start and it crashes, same with Alior's Bank. I was unable to test mBank app, because on that cook audio not works... (Polish banks make's call on app pairing with account - I wont hear IVR). Maybe I'll try to switch SIM card to other device and try that...
Strange researches or needles:
* lot of logs files like:
Code:
[email protected]_Soul_Xtreme:/data/system/dropbox # [email protected]
-- encrypted base64 binary or something, not sure what's that, but looks like google service...
My custom build.props over stock
Code:
ro.config.media_vol_steps=35
debug.sf.nobootanimation=1
ro.ril.enable.amr.wideband=1
ro.config.vc_call_steps=9
ro.config.hw_quickpoweron=true
debug.performance.tuning=1
ro.HOME_APP_ADJ=1
What did I tried
* Wiping data, even internal storage, dalvik, cache partition. Formatting /data
* unrooting
* changing app permissions, reverting ad blocks
* I've compared clean /system image with that on my device with hope that some binary corrupted... nope
* also compared BOOT with clean stock, no diffs
* eject SIM cards, SD Card
* flashed clear stock V5894 system, recovery and boot
* flashed only one other OS for that device: CM13 Android 6
* installed current open gapps
* read logcat and other logs with no inspirations
* cleared protect_s and protect_f... dropped SIM card support, but doesn't change anything, rebooted
* tried some other bank apps, nothing new and strange, I think demo modes work on mocks -- will try other sometimes
* wiped data and system: aliors bank app starts on CM13, need to try pair it with account
* replaced bunch of keystore binary from other 5.1 roms, 2-3 of them somehow works, but without whole success
* commented keystore / mobicore services from boot img - crashes on lockscreen / security settings
* compared partitions expdb frp lk para proinfo seccfg secro tee1 tee2 does they changed last day, nope, they wasn't... however I'm not forget about them
* made an app that tries to generate keypair on loop without success, tried to debug android.security packages
* flashed tee1 partition from mobicore.bin E8_amigo3.1.1_T3035.zip , E8_amigo3.1.12_T3149.zip, V5403_66d0c1f4c2dfe8abab357b3d5e6550bb.zip, V5894_160707_gn_system_update_ota.zip, compared with my readback
* tried to Android encrypt, but it nothing happened after reboot - probably bcuz changed recovery / not diggin more about that
* ...?
Stacktrace's
Alior bank:
Code:
java.lang.RuntimeException: Not able to create key
at pl.alior.c.c.a.a.c.a.a(Unknown Source)
at pl.alior.c.c.a.a.a.a(Unknown Source)
at pl.alior.c.c.a.a.a$1.run(Unknown Source)
(if any one what to help I'll upload apk), screenshot:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Moje ING
(crashed on CM13 if I good remember, probably other, not related problem, gonna try again)
Code:
java.lang.UnsatisfiedLinkError: com.guardsquare.dexguard.runtime.detection.RootDetector
at pl.ing.mojeing.utils.ja.b(SourceFile:2)
at pl.ing.mojeing.payment.hce.l.k(SourceFile:6)
at pl.ing.mojeing.utils.t.i(SourceFile:1)
...
Not tried, but I will:
- readback, change or do anything with preloaders RSA generation on what about I read here and I thing there might be some problem, but I can't find instructions how to do that / not enough experience right now. I've found that on tee1 and tee2 there's somekind "Crypto Driver, Build Feb 12 2015, 17:12:18 CR: t-base-Mediatek-MT6752-Android-302A-V006-39_39 "
- change IMEI, BT or WIFI MAC and any other identification numbers
- any ideas?
...
- finally I'll throw that brick**** f%$#ng mediatek furnace and buy something good.

---

Ok, I'm sure whats broken, but currently don't know how to handle/fix it.
My AndroidKeyStore which is hardware optimized in Allview X2 Xtreme is currently broken,
Proved with apps:
* andOTP great app which able to select what kind of store you want to use -- It crashes just after setting Android KeyStore:
Code:
java.lang.IllegalStateException could not generate key in keystore
I've found some other banking apps which probably use it and also crashes,
(Also made a second topic more specified to the device with suggested banking apps: https://forum.xda-developers.com/pure-xl/help/readback-tee1-tee2-partitions-help-t4020253 )
Today I was able to get same error "could not generate key in keystore" with Nest Bank's application (god bless differently handled exceptions each bank app...)... so I'm sure right now.
* Alior Bank (on sending report, other functionality works ;O ) - https://play.google.com/store/apps/details?id=pl.aliorbank.aib
* Alior Bank Kantor Walutowy - https://play.google.com/store/apps/details?id=pl.alior.mobile.exchange.prd
* Moje ING - https://play.google.com/store/apps/details?id=pl.ing.mojeing
* Nest Bank nowy - https://play.google.com/store/apps/details?id=pl.nestbank.nestbank
As I read changing security settings (unlock for swipe, pin, other sh1t) should force somekind of change on the store, but that's not happening in my case.
I'm gonna try to do that with CM13, however apps looks like they're works fine on it so maybe our handicapped ported rom isn't even support HAL / hardware chip/module responsible for the crypto. Ok, I checked: CM13 applications work fine, andOTP is also able to use store with Hardware optimization. Setting finger/swipe/pin to unlock gave me option "Clear all certificate data"... however it freezes: on changing security or on clear attempt.
I've found some code snippets for java on stackoverflow which might help / will find now some apps which might "move" my store or do whatever just to bump it...
Any advice, please?
____
seo tags: could not generate key in keystore, AndroidKeyStore, HAL cryptography, Android TEE, Trusted Execution Environment...

---

Finally after many many hours I have... only a workaround, but it's better that nothing :F
I've changed names for two libs:
Code:
/system/lib/hw/keystore.mt6795.so
/system/lib64/hw/keystore.mt6795.so
After reboot without with any errors or warnings android changed it's Cert Storage to /only software supported/.
Bank apps began to work after wiping it's data and re-pairing/re-activating... however it's not solution for me: on rooted device software based security storage it's too weak....
"Moje ING" still doesn't work and can't download data, however is unit specified problem - other test-cases works.
Still I've not figured out why CM13 (with Hardware Support) works well on my device.
Might be newer Android / Kernel / Dedicated HAL support included in Android 6.0. To much differences, I can't find that point vs. 5.1 stock.
I have almost gave up last days...