{"id":297,"date":"2026-09-04T22:44:14","date_gmt":"2026-09-04T22:44:14","guid":{"rendered":"https:\/\/neodata.com.uy\/labs\/?page_id=297"},"modified":"2026-09-05T18:13:50","modified_gmt":"2026-09-05T18:13:50","slug":"research","status":"publish","type":"page","link":"https:\/\/neodata.com.uy\/labs\/research\/","title":{"rendered":"Research"},"content":{"rendered":"
\n
\n
\n
\"Three<\/span><\/a>

Mobile Secure Key Containers, Capability Detection, and Key Attestation: A Technical Reference for Credential Wallet SDKs \u2014 Part I<\/a><\/h2>

<\/p>

Android, iOS, and HarmonyOS expose different assurance paths for wallet keys. This reference maps secure containers, capability detection, attestation chains, and fallback tiers.<\/p>\n<\/div><\/div><\/article>

\"A<\/span><\/a>

Toward an open cryptographic workbench.<\/a><\/h2>

<\/p>

Cryptographic tools explain algorithms, transform data and visualise workflows. A protocol workbench could connect those strengths while keeping exact bytes visible.<\/p>\n<\/div><\/div><\/article><\/div><\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n

\n
\n
\n
\"Two<\/span><\/a>

Sign the same message twice.<\/a><\/h2>

<\/p>

Repeated signing reveals whether output varies. Across a population, repeated ECDSA values can expose nonce reuse, compromise and implementation anomalies.<\/p>\n<\/div><\/div><\/article>

\"Identical<\/span><\/a>

The ciphertext does not say which mode produced it.<\/a><\/h2>

<\/p>

Format-preserving ciphertext carries no mode, key or tweak metadata. That convenience makes FF1 and FF3 migration difficult to scope from the data alone.<\/p>\n<\/div><\/div><\/article>

\"One<\/span><\/a>

The verifier and the parser disagree.<\/a><\/h2>

<\/p>

Signature verification fails as a security boundary when the verifier and the application resolve different meanings from the same document.<\/p>\n<\/div><\/div><\/article>

\"A<\/span><\/a>

SMS OTP is now a restricted authenticator. The hard part is what replaces it.<\/a><\/h2>

<\/p>

Leaving SMS removes the telephony channel, but phishing resistance depends on origin binding and on every recovery path that can create a session.<\/p>\n<\/div><\/div><\/article>

\"Machined<\/span><\/a>

Audit the attributes, not the datasheet.<\/a><\/h2>

<\/p>

PKCS #11 key policy is expressed through attributes and mechanisms inside the token. An inventory can reveal permissions that a product datasheet cannot.<\/p>\n<\/div><\/div><\/article>

\"A<\/span><\/a>

A face fits in 960 bytes.<\/a><\/h2>

<\/p>

A signed QR can carry an offline face credential, but signature, encoding and card geometry leave roughly one kilobyte for the image.<\/p>\n<\/div><\/div><\/article>

\"A<\/span><\/a>

What survives the print, the scan and the phone.<\/a><\/h2>

<\/p>

Error correction can recover exact codewords from a damaged symbol. It cannot recover biometric detail removed before the credential was printed.<\/p>\n<\/div><\/div><\/article>

\"Three<\/span><\/a>

Colour buys capacity in exchange for illumination.<\/a><\/h2>

<\/p>

Polychrome barcodes can multiply payload density, but they exchange binary contrast for dependence on inks, cameras and uncontrolled light.<\/p>\n<\/div><\/div><\/article>

\"Translucent<\/span><\/a>

A COSE_Sign1 object is not its signing input.<\/a><\/h2>

<\/p>

Four transmitted fields become a different CBOR structure before signature verification.<\/p>\n<\/div><\/div><\/article>

\"A<\/span><\/a>

Verification is not authorization.<\/a><\/h2>

<\/p>

A valid signature answers a narrower question than most applications need to decide.<\/p>\n<\/div><\/div><\/article><\/div><\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-297","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/pages\/297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/comments?post=297"}],"version-history":[{"count":14,"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/pages\/297\/revisions"}],"predecessor-version":[{"id":424,"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/pages\/297\/revisions\/424"}],"wp:attachment":[{"href":"https:\/\/neodata.com.uy\/labs\/wp-json\/wp\/v2\/media?parent=297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}