expo-clave-tee v0.1.0

expo-clave-tee

Expo module for interacting with TEE

Features

• Supports both Android and iOS
• Selects best possible option to store credentials, and falls back to less secure options if necessary
• Uses best practices to store credentials securely, CryptoKit on iOS and KeyStore on Android

API

import { 
    fetchPublicKey,
    createKeyPair,
    deleteKeyPair,
    sign,
    verify
} from "expo-clave-tee";
import { assert } from "assert";

async function main() {
    const ALIAS = "my-key-pair";
    // Create a key pair
    const pubKey1 = await createKeyPair(ALIAS);
    // Fetch the created key pair
    const pubKey2 = await fetchPublicKey(ALIAS);
    assert(pubKey1 === pubKey2);

    // Delete the key pair
    await deleteKeyPair(ALIAS);
    const pubKey3 = await fetchPublicKey(ALIAS);
    // fetchPublicKey returns undefined if the key pair does not exist
    assert(pubKey3 == undefined);

    // Sign a message
    // sign and verify functions accept hex strings as input
    const message = "Hello World!";
    const hexMessage = Buffer.from(message, "utf8").toString("hex");
    const signature = await sign(ALIAS, hexMessage);
    // Verify the signature
    const isVerified = await verify(pubKey1, hexMessage, signature);
    assert(isVerified);

    // Sign function accepts an optional prompt parameter
    const signature2 = await sign(ALIAS, hexMessage, {
        usageMessage: "Please sign this message",
        androidTitle: "Sign",
    });
}

main();

Error Codes

Each error in the module has an assigned error code to it. It follows this format:

E{`platform`}{`function_type`#02}{`error_type`#02}: {`error_message`}

• platform:
  • 1: android
  • 2: ios
• function_type:
  • 1: fetchPublicKey
  • 2: createKeyPair
  • 3: deleteKeyPair
  • 4: sign
  • 5: verify
• error_type: Type of the error, differs on Android and iOS

In an example error: "E10102: Something is wrong"

• android is the platform
• Error occured from fetchPublicKey function
• Error type is 2 (more details in Error Types)
• Error message is "Something is wrong"

Error Types

Running the example app

iOS

npm i
cd example
npm run ios

Android

In order to run it without a problem I had to follow these steps

• Remove existing Java and Gradle installations
• Install Java 17 (on MacOS, best way to do this is to use sdkman with sdk install java 17.0.4.1-tem)
• Install Android Studio and create a new Android emulator
• Start the emulator
• Run the following commands

Optionally you can install Gradle 7.4, but it should be installed automatically by the npm run android command

npm i
cd example
npm run android