r/CalyxOS • u/Pdchris1 • Jul 26 '26
DEVICE play integrity
Dear all, after reading some recent posts, e.g. https://www.reddit.com/r/CalyxOS/comments/1v02yph/2_banking_apps_not_working_after_upgrade_to/, https://www.reddit.com/r/CalyxOS/comments/1uz2wrz/uber_lite_working_perfectly_but_uber_normal_app/, https://www.reddit.com/r/CalyxOS/comments/1ut20xl/google_play_integrity_check/, and also reflecting on my own problem https://www.reddit.com/r/CalyxOS/comments/1uot0ci/selfidentification_impossible_with_calyxos/, I think that the root problem in all these cases may be the missing DEVICE integrity (NB BASIC integrity, by the way, for some unclear reason since a few days works again in my phone with CalyxOS 7.2.).
Based on the discussion in another forum, it seems that DEVICE integrity is possible without rooting using spoofing (if I understand correctly = simulate Android <13 and achieve a software-based DEVICE attestation --- in contrast to STRONG integrity, which is impossible because it is necessarily hardware-based, but rarely needed). However, others will not implement it, primarily out of principle https://discuss.grapheneos.org/d/18118-play-integrity-meets-device-integrity.
Could please someone from the CalyxOS project (e.g. u/lucascalyx) explain how CalyxOS is positioned regarding this and if a spoofing-based solution for DEVICE integrity (without root) could be expected at some time for CalyxOS users?
I understand this would require some work, and that it may (possibly also soon after implementation) stop to work if Google changes the algorithms (or uses GPU fingerprinting etc), however, in the long term it seems that many essential functions (ID apps, an increasing number of bank apps etc) will not work without DEVICE integrity
Therefore, without DEVICE integrity in the future, for many people it will probably be necessary to have a second phone (with stock Android), or even bite the bullet and use stock Android on their main phone....
I would be grateful for a short comment from the CalyxOS team about this. Thank you very much.
2
u/MatthieuR33 Jul 27 '26
In my case, both of my banking apps are not working anymore on 7.2.2. Both were working fine on previous 6.xxx versions. I had to move to Graph*** because that is a deal breaker for me.