Hey everyone! Recently I found that most biometric...

# feed

[Ilia]

Hey everyone!
Recently I found that most biometric implementations in KMP projects are just a boolean gate — the prompt shows, the user scans, you get true/false. The problem is that on a rooted device with hooking tools, that gate can be forced.

kmp-biometric-auth goes a step further:
• Android: the biometric check is required to unlock a Keystore-bound AES/GCM key — so Success is only reachable if real crypto completed at the OS/hardware level
• iOS: the result is a Keychain item protected by biometryCurrentSet access control — Face ID or Touch ID, automatically
So key invalidation on enrollment changes is handled on both platforms!

Hope it's useful for somebody kmp logo
GitHub: github.com/Froyder/kmp-biometric-auth

[Jordan Haven]

I like to see people taking biometrics seriously on Android 😄 I wrote the biometric implementation for Android at my previous company (Stytch) and wrote a blog post about the exact thing you're describing a few years ago, haha

[Jordan Haven]

Then I had to rewrite it for KMP when we released the KMP SDK, so I got familiar with the iOS implementation, too!

[Bernd Prünster]

Agree, too much fragmentation in that space! Signum gives you biometric auth + hw-backed crypto and attestation, but that is just one part of a whole KMP cryptography stack (which is more or less needed anyways, imho, if you want proper auth)

[Ilia]

Not gonna lie, Signum looks impressive!
But still my idea was to build something as simple as it gets, something you could drop in with a single dependency just for biometric auth, without pulling in a full crypto stack.

[Bernd Prünster]

related, because complimentary github.com/a-sit-plus/AuthCheckKit

[Bernd Prünster]

Not gonna lie, Signum looks impressive!

Haha, even pi and a smal local LLM can cook up an impressive-looking website 😉