PhilippC / keepass2android

Password manager app for Android
https://play.google.com/store/apps/details?id=keepass2android.keepass2android
GNU General Public License v3.0
4.84k stars 391 forks source link

Crash: Fingerprint & Yubikey 5 NFC Challenge Response #1151

Open sebastianheierhoff opened 4 years ago

sebastianheierhoff commented 4 years ago

Is there any way to combine fingerprint and Yubikey challenge-response to unlock the database in keepass2android? Using only the Yubikey to unlock the database works fine. I can use the fingerprint for QuickUnlock. If I enable full unlock via fingerprint, keepass2android crashes when trying to unlock the database.

joepitt91 commented 4 years ago

Similar crash here, my setup is a database with a long password (long enough to not want to keep typing it on a phone keyboard) and YubiKey 5C Challenge-Response.

Current Behaviour

Manual Unlock - successful

  1. Select Database File from OneDrive,
  2. Select Password + Challenge-Response,
  3. Type password,
  4. Tap Load OTP Auxiliary File,
  5. Tap YubiKey to phone,
  6. Tap UNLOCK

Full Fingerprint Unlock - fails

  1. Touch fingerprint sensor,
  2. App crashes out completely

Expected / Desired Behaviour

Manual Unlock

If the xml file is correctly co-located then I think it should be loaded automatically, rather than needing to tap a button each time, with a workflow like this:

  1. Select Database File from OneDrive,
  2. Select Password + Challenge-Response (OTP Auxiliary File loaded automatically - show load button if not found),
  3. Type password,
  4. Tap UNLOCK,
  5. Tap YubiKey to phone.

Full Fingerprint Unlock

  1. Touch fingerprint sensor,
  2. Tap YubiKey to phone.
klausklemens commented 3 years ago

I think I'm having the same issue. After reading the fingerprint it doesn't prompt for the Yubikey.

I always have to abort fingerprint reading, load otp auxilary file, and finally press the fingerprint button next to the password field and it works.

alexander-thiesen commented 2 years ago

This issue is similar to #754.

pmorange commented 2 years ago

Hi, It's been over two years and this issue is still in Open status. Having to enter the password every time is quite time consuming when the password is a complicated one as in my case...

Is there any hope this will be solved ?

Thanks.