Yubico / yubikit-android

Yubico Mobile Android SDK - YubiKit
Apache License 2.0
102 stars 38 forks source link

[fido] Clear sensitive data after use #101

Closed AdamVe closed 10 months ago

AdamVe commented 10 months ago

Memory containing user provided pin will be cleared after the pin is used/or on error. For BasicWebAuthnClient.ctapMakeCredential and BasicWebAuthnClient.ctapGetAssertions try {} finally {} blocks were added.