"Keystore key generation failed" in Motorola Edge 30 Pro Android 13. [295921131]

Bug

Status Update

No update yet.

Description

sa...@gmail.com

created issue #1

Aug 14, 2023 07:45PM

Component used: Jetpack securty. Version used: "androidx.security:security-crypto:1.0.0" Devices/Android versions reproduced on: Motorola Edge 30 Pro Android 13

Detail

I'm having thousand of issues, 98% in Motorola Edge Pro and just in Android 13 when executing this line:

MasterKeys.getOrCreate(MasterKeys.AES256_GCM_SPEC)

I don't have a device to reproduce this error just some data recollected from our bug tracker. Also, I can't test if the alpha versions of the library v1.1.0 correct this, but checking the readme doesn't seem to be fixed.

Stacktrace

java.lang.RuntimeException: Unable to create application [app-name]: java.security.ProviderException: Keystore key generation failed
	at android.app.ActivityThread.handleBindApplication(ActivityThread.java:6962)
	at android.app.ActivityThread.-$$Nest$mhandleBindApplication(Unknown Source:0)
	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2219)
	at android.os.Handler.dispatchMessage(Handler.java:111)
	at android.os.Looper.loopOnce(Looper.java:238)
	at android.os.Looper.loop(Looper.java:357)
	at android.app.ActivityThread.main(ActivityThread.java:8118)
	at java.lang.reflect.Method.invoke(Native Method)
	at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:548)
	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:957)
Caused by: java.security.ProviderException: Keystore key generation failed
	at android.security.keystore2.AndroidKeyStoreKeyGeneratorSpi.engineGenerateKey(AndroidKeyStoreKeyGeneratorSpi.java:413)
	at javax.crypto.KeyGenerator.generateKey(KeyGenerator.java:612)
	at androidx.security.crypto.MasterKeys.generateKey(MasterKeys.java:130)
	at androidx.security.crypto.MasterKeys.getOrCreate(MasterKeys.java:88)

Any idea?

Comments

is...@google.com <is...@google.com> Aug 15, 2023 07:07AM

Status: New

wj...@gmail.com <wj...@gmail.com> #2Aug 17, 2023 10:18PM

I am not sure I understand the use case. how can the benchmark be code to real world scenario when it's not possible to do right now ? which scenario is it ?

In any case, since this would be for benchmarking, this would clearly not be available through the public DSL. We should find a semi-private way of doing this (maybe the private variant API object could offer that functionality for instance or a property).

sa...@gmail.com <sa...@gmail.com> #3Sep 14, 2023 06:24PM

We want benchmarks to measure code after Progaurd / R8, but it's not possible to turn that on for androidTests in library modules at the moment (to my knowledge?)

Benchmarks are also a public facing thing, but we have a plugin to help configure gradle builds for our users, so if support for this ends up in a private API, we could try to keep those usages localized to our code perhaps.

Issue 295921131