fix license verifySignature to use Bouncy Castle Ed25519 instead of java.security KeyFactory/Signature - the JCA 'Ed25519' algorithm name routes to AndroidKeyStore's provider on-device, which only accepts KeyGenParameterSpec-generated keys and throws InvalidKeySpecException on any imported public key, silently swallowed to false; confirmed root cause via instrumented on-device test capturing the real exception, confirmed fix with the real test key validating true on-device
$ koh steal kepr.uk/peach-android@6e842eac315e
·
parent: aea3a3106d8e
discussion
log in to leave a comment.