Repository navigation
PIN pad randomization #90
Description
Area
Other
The problem
Randomizing the PIN pad buttons reduces the risk of PIN recovery from observed tapping patterns, screen recordings, and physical touch traces. Fingerprints and distinctive smudge marks can remain on the screen; if the digits are always in the same positions, it becomes easier to narrow down the set of possible PIN codes.
Proposed shape
Randomize order of buttons in PIN pad on each PIN request.
Alternatives considered
No response
Activity
fix(fido): the strong-pin rule refused two shapes and let three through
feat(display): the PIN pad can lay its digits out afresh for every entry
display: no host test ever typed a PIN on the scrambled pad, and the …