search

LandryNorris / MultiFactor

MultiFactor Authentication app
Apache License 2.0
5 stars 0 forks source link

Find more secure way to store keys on JVM #14

Open LandryNorris opened 1 year ago

LandryNorris commented 1 year ago

Right now, we use pkcs12 with a hardcoded password of 'changeit'. On Android and iOS, we use Secure Enclaves, leaving a large security gap between mobile and desktop.

LandryNorris commented 1 year ago

It would be ideal to get the key automatically, without having to prompt user for a password. I looked into this library, but the fact that any java app can get the keys is not great.