Files
pezkuwi-wallet-android/feature-account-impl
Satoshi Qazi Muhammed 09ea51e138 Bind biometric unlock to a keystore key
A biometric success was taken from the prompt callback alone. With strong biometrics the prompt now
carries a cipher of a keystore key that requires user authentication and is invalidated when
biometrics are enrolled: the first prompt seals a random token, later ones must open it, and only an
opened token unlocks. If biometrics changed, biometry is turned off and the PIN is asked for. Weak
biometrics (most face unlock) cannot use a keystore key and keep the plain prompt. androidx.biometric
goes to 1.1.0 for the authenticator classes.
2026-11-03 18:08:45 +04:00
..