idpass / idpass-lite-java

Java wrapper for idpass-lite, a library to create and interact with secure and biometrically-binding QR code identity cards
https://www.idpass.org/
Apache License 2.0
24 stars 2 forks source link

Externalize KeyStore usage #22

Closed typelogic closed 3 years ago

typelogic commented 3 years ago

Current Behaviour

The current KeyStore usage only works on Java but not on Android due to differences in they way of securing keys. It raises the minSdkversion to 26, but is not used in Android.

Expected Behaviour

minSdkVersion version should be 16 and the handling of key security is outside the scope of ID PASS Lite reader and should be externalized.

Steps to Reproduce the Problem

  1. Reader should not be responsible for key security. For example, this method should be externalized.

Context

N/A

typelogic commented 3 years ago

Current findings:

typelogic commented 3 years ago

Fixed in https://github.com/idpass/idpass-lite-java/commit/58f55f1aa2d6a83bf6d47c740ca512fbeff15c33