Tauri Plugin crypto

This project is a Tauri plugin which allows for hardware KeyStore (Secure Enclave (iOS) & StrongBox (Android)) control and management on iOS and Android devices with a consistent API.

Platform	Supported
Linux	x
Windows	x
macOS	x
Android	✓
iOS	✓

API

Available Commands

import { generate } from "@auvo/tauri-plugin-crypto-hw-api";
async function generate() {
  generate("default")
    .then((returnValue) => {
      genRes = returnValue;
    })
    .catch((error) => {
      genRes = error;
    });
}

import { exists } from "@auvo/tauri-plugin-crypto-hw-api";
async function exists() {
  exists("default")
    .then((returnValue) => {
      genRes = returnValue;
    })
    .catch((error) => {
      genRes = error;
    });
}

import { getPublicKey } from "@auvo/tauri-plugin-crypto-hw-api";
async function getPublicKey() {
  getPublicKey("default")
    .then((returnValue) => {
      genRes = returnValue;
    })
    .catch((error) => {
      genRes = error;
    });
}

import { signPayload } from "@auvo/tauri-plugin-crypto-hw-api";
async function signPayload() {
  signPayload("default")
    .then((returnValue) => {
      genRes = returnValue;
    })
    .catch((error) => {
      genRes = error;
    });
}

import { verifySignature } from "@auvo/tauri-plugin-crypto-hw-api";
async function verifySignature() {
  verifySignature("default")
    .then((returnValue) => {
      genRes = returnValue;
    })
    .catch((error) => {
      genRes = error;
    });
}

Default Permission

This permission set configures which crypto features are by default exposed.

Granted Permissions

crypto-hw:default: It allows access to all crypto commands.

This default permission set includes the following:

• allow-generate
• allow-exists
• allow-get-public-key
• allow-sign-payload
• allow-verify-signature

Permission Table

Identifier	Description
crypto-hw:allow-exists	Enables the exists command without any pre-configured scope.
crypto-hw:deny-exists	Denies the exists command without any pre-configured scope.
crypto-hw:allow-generate	Enables the generate command without any pre-configured scope.
crypto-hw:deny-generate	Denies the generate command without any pre-configured scope.
crypto-hw:allow-get-public-key	Enables the get_public_key command without any pre-configured scope.
crypto-hw:deny-get-public-key	Denies the get_public_key command without any pre-configured scope.
crypto-hw:allow-sign-payload	Enables the sign_payload command without any pre-configured scope.
crypto-hw:deny-sign-payload	Denies the sign_payload command without any pre-configured scope.
crypto-hw:allow-verify-signature	Enables the verify_signature command without any pre-configured scope.
crypto-hw:deny-verify-signature	Denies the verify_signature command without any pre-configured scope.