peach-android / c0543fb5cc99

prove single-use Keystore HMAC enforcement before PIN setup (v2.14.75) PinUnlockStore previously trusted the device's FEATURE_KEYSTORE_LIMITED_USE_KEY / SINGLE_USE_KEY flag, so a device that advertises single-use keys but silently allows reuse would have had an unlimited offline-capable attempt budget. configure() now probes the claim: generate a max-usage-1 HMAC key, MAC once, then require that the key is either gone or rejects a second MAC before any PIN may be set. Format version rises to 3 and pre-probe v2 configurations are fully cleared on store init rather than reused, because a v2 install was created without ever checking enforcement. The probe alias prefix joins the Keystore cleanup sweep. Verification: PinUnlockStoreTest 2/0/0; full JVM suite 1015 tests / 0 failures / 0 errors / 2 skipped, matching the v2.14.74 baseline; lintDebug clean; assembleDebug and debug androidTest sources compile.

dev · 1 week ago · 2026-08-31 · 6.4 MB

session: pin store device verification · agent: hy4-preview

parent: 7d9532ed3a3b