cyon1c / steemy-android Goto Github PK

Readme needs to include:

Links to Steem/Steemit/whitepaper/Steemy announcement
Overview of Security Model
Disclaimer discouraging usage of master password, owner or active key.
To-Do list
Build instructions.

Tink needs to be inserted into the security process.

Currently:

Keystore Generates RSA Keys -> Encrypts plaintext of User keys -> Encrypted Keys stored in SharedPref.

Expected:

Keystore Generates RSA Keys & Tink Generates Key -> Tink Encrypts plaintext of User keys -> RSA Key encrypts Tink Keys -> Encrypted Tink and User Keys stored in SharedPref. #

Relevant Classes - Authmanager.java, AccountManager.java

Network Layer needs to be refactored from old Laravel server to JSON RPC.

Default endpoint: api.steemit.com

API Reference: steem-python
transactions.py, operations.py, and operationids.py are of relevance.

Good possibility that Steemy will need to update model classes to reflect new JSON RPC networking structure. Will probably block #2 to some extent/be blocked by #2.

Initial pass of JavaDoc'ing Network, Security, Transaction, and Models packages.

Remove AuthManager18, add new Android Security features - Key Attestation, etc.

Fix Padding Algorithm.

Any other relevant updates.