-
-
Notifications
You must be signed in to change notification settings - Fork 524
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
"Could not decrypt data with alias: " #458
Comments
|
|
On "react-native-keychain": "^8.0.0", at the mo. |
Thanks for the answer @WilliamAlexander. We're investigating what it would take to move to securestore as well. |
That's interesting. I like expo npm packages (not cli as it's too bulky) and they are well maintained |
@oblador hey Joel, I'm wondering if you're aware of the issue above, and if there are plans on fixing it. |
Also seeing the Considering patching |
Patched. The |
Just FYI - we saw this error on a Google Pixel 4a running Android 12. Versions:
|
We have had had multiple users report this happening pretty often on Android. The ones that also reported device and api were: Google Pixel 3 API 28
Patch suggestion attempted but didn't work on our Google Pixel 2 API 30 test device. |
Having the exact same issue! Is there a workaround? Only Android and mostly Samsung devices.
|
related to #567 I think :( |
faced the same issue on S22, Pixel 7, Xiaomi Redmi Note 9 Pro
|
Is there any workaround for this? Then please share. |
any updates on this? |
We are now seeing this more often as well, one of our users stated it happened after upgrading his Samsung (S21+) to the latest android version. |
The same issue here, Could not decrypt data with alias: for the devices below all running Android 13: SM-G990E |
I have the same issue with XUMM Error message: "Could not decrypt data with alias: xumm-realm-key: java.security. InvalidKeyException: Keystore operation failed". Is there a fix for this issue? |
Also getting reports from users of this error in the last week 👍 |
We have also started to see crash reports from our customers with the Samsung SM-G991B. Does anyone know any workaround? |
Same here, Samsung SM-G991B is the problem. Seems to appear more frequently than before without any specific change from our side |
@TwistedMinda, we have seen a sudden increase of this error the last few days, starting to pick up on the 11th of October. Could it be that Samsung is rolling out a security fix that makes this issue worse? |
@yberstad No we don't have access to the specific device to reproduce. I think a Samsung update is the most straightfoward reason, what else could have changed? No user complained either. We'll keep an eye on it 👀 |
@TwistedMinda, thanks for your quick response. We are starting to get customer complaints regarding this, so we'll try to investigate further. If we find workaround I'll let you know. |
I can confirm that it happened straight after installing Samsung's latest update (including security patch 1 October 2023) on my Galaxy S21 5G. |
Good to know, thanks for reporting! So that's a good news, it means the bug only happens once, when the data are already on the device, and further resetting the values don't cause problems. So supposedly the update messed up a specific space in memory, but only at installation time... Right? Of course the need to reset app data depends on the implementation of catching the underyling error. |
For anyone who wants to reproduce. You gotta have affected device. I have Galaxy S21 FE - which is also affected.
What I found so far. KeyMaster seems to be updated to V4. KeyMaster considers the key need to be updated - whatever it means. The update fails for no understandable (at least to me) reason. The error originates here. Logcat output
Any input is highly appreciated |
Hi @alexandrius ! Thanks for sharing this! Have you tried the encrypt operation? |
@androideveloper Can you please clarify what do you mean? |
Yes! I guess it fails as well |
@androideveloper I haven't tried but I think it will go through since it deletes previous master key. Seems like the Keys can be damaged and it's somehow related to hardware |
@TwistedMinda @Ernst2106 @yberstad @lucasftcruz @c-goettert Samsung just released another update yesterday and I can confirm it fixes the issue. |
@N3TC4T the security patch level in the picture is still Oct 1 though 🤔 did they release multiple patches for October? |
@matt-alice there are patches from october, however I don't think the patch was faulty but rather crappy Samsung code on top of it |
@androideveloper it's another update, which has been released yesterday. |
Seems to be that updates are rolled out at different times depending on the region and under these really confusing version numbers. I did find a page were you can see the list of releases currently available for a specific model in a specific region. For example, my affected device model number is: Galaxy S21 FE 5G (SM-G990B2), Googling that + "updates", I get the following site in the results: https://doc.samsungmobile.com/SM-G990B2/EUX/doc.html The "EUX" part in the URL denotes the region. Looking at the release date (and not at "Security patch level") looks like the latest patch that fixes the issue (i.e., something released yesterday) is not yet available in Europe. |
We're getting a JSON parse error when parsing a stored JSON string from Keychain. |
In case anybody is curious, I'm no longer having any trouble with this, or any error at all, after migrating to Expo Secure Store. It does appear to be related to the way this library interacts with the native APIs and not the native APIs themselves. |
@bpeltonc this library is fine. By moving to expo-secure-store you just recreated all the keys. Recreating keys is what "fixed" the problem. |
Hi, do we have any solution to resolve this error. |
Samsung released a new update, which fixes this issue |
Hi, @Ernst2106, we are using an open-source version of Android 10 and Android 6. We are encountering this error. |
Maybe needs an update? |
There is a known and outstanding issue and the suggested workaround is to recreate the keys as @alexandrius suggested. |
Also having users experiencing this issue on Pixel 5 - Android 14, but not all of them. |
The same issue happens on XiaoMi 12 Pro device(Android 13). This happens when the faceId is turned on while the fingerprint is turned off. |
Also experiencing this, any workarounds? |
We have the same issue. We found out, when switching phones Android 'restores' your apps. Some apps also restore their internal caches, probably coming from the google cloud. And after this restore it gets corrupted... Probably the same after some phone updates as well. |
We are starting to see a sudden increase of this error again in one of our apps, on all kinds of android devices (mostly android 14).. |
if it's the same as expo's secure-storage issue, then maybe this can help?
|
HERE IS A SOLUTION
|
Now and again I get the error:
"Could not decrypt data with alias: "
Happens when I call Keychain.getGenericPassword()
I don't use a service when calling Keychain.setGenericPassword (it uses the package name as default in Android).
Out of over 5k users, it happens for around 20 users (so far).
99% of the devices are Samsung.
Tried myself on a Samsung phone and I cannot recreate.
Not sure if related to the user:
I'll eventually update the react-native-keychain package but holding off as it might cause further issues in this field
"react-native": "0.64.0",
"react-native-keychain": "^6.2.0"
The text was updated successfully, but these errors were encountered: