Satoshi Qazi Muhammed f52437e021 Encrypt stored secrets with a keystore AES-GCM key and migrate old values on read ...

Secrets and the PIN were AES-CBC without authentication, under a random key kept in shared preferences
and wrapped by a keystore RSA key with PKCS#1 v1.5 padding. They are now AES-256-GCM under a key that
never leaves the Android keystore, stored as "v2:" + Base64.

Old values stay readable through a read-only decrypter of the previous scheme; nothing is written in it
any more and no new RSA key is created. A legacy value is re-encrypted when it is read, and replaced
only once the new copy decrypts to the same text. A value that cannot be decrypted now reads as absent
and is left untouched, where decrypt() used to return "" and let a caller treat it as a value.

2026-11-03 18:08:45 +04:00

..

libs

fix: 16KB page alignment for all native libraries

2026-03-14 18:35:15 +03:00

src

Encrypt stored secrets with a keystore AES-GCM key and migrate old values on read

2026-11-03 18:08:45 +04:00

.gitignore

Initial commit: Pezkuwi Wallet Android

2026-02-12 05:19:41 +03:00

build.gradle

Config keeps working when GitHub is unreachable: mirrors and a bundled chain list (#28)

2026-11-01 10:10:50 +04:00