Aegis: Crash on fingerprint login if new fingerprints have been added

[altazure]

After enabling Aegis fingerprint login, if I add new fingerprints in the Android security settings, the app crashes every time when I try to log in using any of my fingerprints. The issue is resolved by disabling and re-enabling fingerprint login in Aegis settings.

My phone is Galaxy S7, Android version 8.0.0.

[alexbakker]

Thanks for your report. This is odd, because the app should issue a warning in case fingerprint settings are changed, like this:

I'm unable to reproduce this crash. Could you provide a log?

[altazure]

Yeah, it doesn't show that warning to me, but asks for the fingerprint as usual.

I'm not really familiar with mobile dev stuff, where can I find the logs?

[alexbakker]

To obtain a log, you need to connect your phone to your computer and run a program called ADB. Please run adb logcat, reproduce the crash and share the log that was produced.

See also: https://developer.android.com/studio/command-line/logcat.

[enteryournamehere]

I'm having the same issue on my Galaxy S8 running Android 8.0.0.
I managed to forget my password because I always logged in using my fingerprints :(

Logcat outputs a _lot_, can you point me in the right direction to find the relevant parts so I can upload it here?

[alexbakker]

@enteryournamehere

If you have forgotten your password _and_ have added a new fingerprint (which invalidates the key in the Android KeyStore), you will not be able to decrypt your vault, even if we fix this crash.

Anyway, you can apply a filter with the PID of Aegis:

adb logcat --pid=$(adb shell pidof -s com.beemdevelopment.aegis)

This might filter out some other relevant info, but let's see what this gets us first.

[alexbakker]

I noticed a crash report in the Play Console that may be related.

java.lang.RuntimeException: 
  at android.os.AsyncTask$3.done (AsyncTask.java:353)
  at java.util.concurrent.FutureTask.finishCompletion (FutureTask.java:383)
  at java.util.concurrent.FutureTask.setException (FutureTask.java:252)
  at java.util.concurrent.FutureTask.run (FutureTask.java:271)
  at android.os.AsyncTask$SerialExecutor$1.run (AsyncTask.java:245)
  at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1162)
  at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:636)
  at java.lang.Thread.run (Thread.java:764)
Caused by: java.lang.RuntimeException: 
  at com.beemdevelopment.aegis.ui.tasks.SlotListTask.doInBackground (SlotListTask.java:45)
  at com.beemdevelopment.aegis.ui.tasks.SlotListTask.doInBackground (SlotListTask.java:19)
  at android.os.AsyncTask$2.call (AsyncTask.java:333)
  at java.util.concurrent.FutureTask.run (FutureTask.java:266)
Caused by: com.beemdevelopment.aegis.db.slots.SlotException: 
  at com.beemdevelopment.aegis.db.slots.Slot.getKey (Slot.java:56)
  at com.beemdevelopment.aegis.ui.tasks.SlotListTask.decryptFingerprintSlot (SlotListTask.java:56)
  at com.beemdevelopment.aegis.ui.tasks.SlotListTask.doInBackground (SlotListTask.java:42)
Caused by: javax.crypto.IllegalBlockSizeException: 
  at android.security.keystore.AndroidKeyStoreCipherSpiBase.engineDoFinal (AndroidKeyStoreCipherSpiBase.java:519)
  at javax.crypto.Cipher.doFinal (Cipher.java:1736)
  at com.beemdevelopment.aegis.crypto.CryptoUtils.decrypt (CryptoUtils.java:107)
  at com.beemdevelopment.aegis.crypto.CryptoUtils.decrypt (CryptoUtils.java:96)
  at com.beemdevelopment.aegis.db.slots.Slot.getKey (Slot.java:50)
Caused by: android.security.KeyStoreException: 
  at android.security.KeyStore.getKeyStoreException (KeyStore.java:1137)
  at android.security.keystore.KeyStoreCryptoOperationChunkedStreamer.update (KeyStoreCryptoOperationChunkedStreamer.java:132)
  at android.security.keystore.KeyStoreCryptoOperationChunkedStreamer.doFinal (KeyStoreCryptoOperationChunkedStreamer.java:217)
  at android.security.keystore.AndroidKeyStoreAuthenticatedAESCipherSpi$BufferAllOutputUntilDoFinalStreamer.doFinal (AndroidKeyStoreAuthenticatedAESCipherSpi.java:373)
  at android.security.keystore.AndroidKeyStoreCipherSpiBase.engineDoFinal (AndroidKeyStoreCipherSpiBase.java:506)

@altazure, @enteryournamehere I would really appreciate it if one of you could obtain a log and share it here. I'm curious to see if it's the same exception and if so what the message of that KeyStoreException is.

[enteryournamehere]

Sorry, forgot about this issue (I eventually did remember my password luckily). I can't reproduce the crash on the latest version of Aegis, it gives a friendly message about the added fingerprint now.

[michaelschattgen]

Closing this issue as this should not cause a crash on the latest version anymore.