Please update Bouncy Castle

• https://www.bouncycastle.org/
• https://www.bouncycastle.org/releasenotes.html
• http://www.bouncycastle.org/latest_releases.html
• https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncy%20castle
• https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncycastle
• https://www.cvedetails.com/vulnerability-list/vendor_id-7637/Bouncycastle.html

As far as I can tell we are pulling a big dependency in the form of BouncyCastle:

Supersedes:

• #36
• status-im/status-mobile#10335

Please update Bouncy Castle

• https://www.bouncycastle.org/
• https://www.bouncycastle.org/releasenotes.html
• http://www.bouncycastle.org/latest_releases.html
• https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncy%20castle
• https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncycastle
• https://www.cvedetails.com/vulnerability-list/vendor_id-7637/Bouncycastle.html

Would it be possible to add the documentation for the RNStatusKeycard object?

Mind if you change the README.md a bit to know how to use it in iOS? @bitgamma

Hello,
I am working on a project with the Ethereum Foundation where we do something similar to this. I was wondering if anyone would be willing to connect and share some knowledge or pitfalls around the React Native implementation.

When trying to build fresh new React native app with installed and linked keycard package, I am getting the following errors:

Could not determine the dependencies of task ':app:preDebugBuild'. Could not resolve all task dependencies for configuration ':app:debugRuntimeClasspath'. Could not find com.github.status-im.status-keycard-java:android:2.2.1. Searched in the following locations: ............... Required by: project :app > project :react-native-status-keycard

I tried both automated and manual linking according to Readme.
I then added jitpack to the repositories section in android/build.gradle file, and looks like build move forward, however I got another error I am unable to solve:

Command failed: gradlew.bat app:installDebug -PreactNativeDevServerPort=8081 D:\pathtoproject\android\app\build\generated\rncli\src\main\java\com\facebook\react\PackageList.java:17: error: cannot find symbol import com.reactlibrary.RNStatusKeycardPackage;

Looks like expected com.reactlibrary.RNStatusKeycardPackage is different namespace then what is mentioned to be imported in the manual installation docs (im.status.ethereum.keycard.RNStatusKeycardPackage) or might there be another issues in my setup I can not grasp? Help appreciated.

hardwallet-lite-android is deprecated in favor of status-keycard-java https://github.com/status-im/status-keycard-java

at the moment, the Java SDK throws an IOException when autoOpenSecureChannel or autoPair fails. This is the same exception throw when connection to the card fails.

In getApplicationInfo this exception is caught in order to determine if the pairing is valid or not but no distinction is made between invalid authentication and connection lost. After updating the SDK to separate pure IO errors from unexpected card responses, these two cases can be handled independently.

if an IOException is thrown, it is let bubble up to status-react, which should interpret it as connection lost (and probably just prompt the user again to connect the card)

only if an APDUException is thrown during openSecureChannel, getApplicationInfo's current behavior will apply (catching and setting "paired?" to false). This should then be interpreted as missing or invalid pairing. In that case the puk and pin retry counters won't be available, because they are only retrievable after opening a secure channel.

The changes to this component are not complex, however implementing them changes the behaviour under error conditions of

• getApplicationInfo
• pair

pair will also automatically gain a differentiation between card connection lost and invalid pairing by throwing IOException and APDUException respectively. This can be used in status-react to react differently to these error conditions.

Because of these changes in behavior, the error scenarios involving these two methods should be tested again to make sure the approriate behavior still applies.

Implement an iOS version of this extension using the Keycard.swift SDK

I've tried to install the package with npm and the react-native CLI.

commands:

react-native link react-native-status-keycard

npm install react-native-status-keycard --save

Both packages couldn't be found.

I am getting following error while trying to invoke "pair" function

[Error: Invalid card cryptogram]

I have verified the password which i am passing as argument to pair functions but it gives same error.
Is there any possible reason as i read in the documentation that keycard can be paired with 5 devices but right now it is not working apart from Status.im app.

Note: i am having Status.im app and the other app with which i am trying to pair on the same phone .

while trying to build android app with react native status keycard , i am getting following errors

/react/PackageList.java:60: error: cannot find symbol
import com.reactlibrary.RNStatusKeycardPackage;
^
symbol: class RNStatusKeycardPackage
location: package com.reactlibrary
/android/app/build/generated/rncli/src/main/java/com/facebook/react/PackageList.java:131: error: cannot find symbol
new RNStatusKeycardPackage(),
^
symbol: class RNStatusKeycardPackage
location: class PackageList
2 errors

FAILURE: Build failed with an exception.

However changing package import manually works but it shouldn't be like this. Ideally it should generate and link packages properly . I have followed all the steps mentioned in the page documentation but still the error doesnt seem to go away.