a-sit-plus / signum

Kotlin Multiplatform Crypto/PKI Library and ASN1 Parser + Encoder
https://a-sit-plus.github.io/signum/
Apache License 2.0
68 stars 4 forks source link

[Supreme] Decrease minSDK from 30 to 29 for android #161

Open WebTiger89 opened 4 weeks ago

WebTiger89 commented 4 weeks ago

Is it possible to decrease the min supported SDK for android? I want to do signature verification with SHA256 and RSA, maybe I can omit supreme module?

JesusMcCloud commented 4 weeks ago

the verifier is part of the supreme module. we might be able to lower it, but onyl if working with biometrics does not turn into a hot mess

JesusMcCloud commented 4 weeks ago

@FelixHoer would this part of the code still work with SDK 29?

JesusMcCloud commented 2 weeks ago

We've looked into this. The issue with decreasing the minSDK is that the constraints on the key cannot be as granular as we have it now. This is irrelevant for verification, though. As we're hamstrung by Kotlin/Native limitations related to how modules depend on each other, we need to figure out, if and how we want to separate verification from signing.