bollwerk/app
Jens Reinemann 8e7352dcc4 feat(security): replace CleartextKeysetHandle with AndroidKeysetManager (#105)
- Extract PrivateKeysetStore interface for testability
- Add AndroidKeystorePrivateKeysetStore (Android Keystore-backed AEAD)
- Refactor E2EEKeyManager to use PrivateKeysetStore
- Add legacy migration: old cleartext key is removed, forcing re-generation
- Update DI module to provide AndroidKeystorePrivateKeysetStore
- Adapt unit tests with FakePrivateKeysetStore + migration test

Private key material no longer appears as cleartext JSON on the JVM heap.
Existing devices with legacy keys will re-generate and re-upload via
EnsureKeyPairUseCase on next app launch.
2026-05-18 09:51:24 +02:00
..
schemas/de.bollwerk.app.data.db.BollwerkDatabase feat: Migration-Safety – Room v7, AutoMigration, Flyway, kein fallbackToDestructiveMigration (#99) 2026-05-17 21:17:24 +02:00
src feat(security): replace CleartextKeysetHandle with AndroidKeysetManager (#105) 2026-05-18 09:51:24 +02:00
build.gradle.kts chore: version bump 1.5 (6) -> 1.6 (7) 2026-05-18 00:32:53 +02:00
proguard-rules.pro feat: Android-Projekt-Gerüst anlegen (#13) 2026-05-13 15:24:39 +02:00