feat: clone from https://github.com/reitowo/hw-sign

2025-07-25 23:24:13 +08:00
parent e34bcd80dd
commit 4f366c12a3
84 changed files with 12608 additions and 2 deletions
--- a/hw-sign-android/app/src/main/AndroidManifest.xml
+++ b/hw-sign-android/app/src/main/AndroidManifest.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools"
+    package="fan.ovo.hwsign">
+
+    <uses-permission android:name="android.permission.INTERNET" />
+
+    <application
+        android:allowBackup="true"
+        android:dataExtractionRules="@xml/data_extraction_rules"
+        android:fullBackupContent="@xml/backup_rules"
+        android:icon="@mipmap/ic_launcher"
+        android:label="@string/app_name"
+        android:roundIcon="@mipmap/ic_launcher_round"
+        android:supportsRtl="true"
+        android:theme="@style/Theme.Dbcs"
+        tools:targetApi="31">
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:label="@string/app_name"
+            android:theme="@style/Theme.Dbcs">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+    </application>
+
+</manifest>
--- a/hw-sign-android/app/src/main/java/fan/ovo/hwsign/AuthService.kt
+++ b/hw-sign-android/app/src/main/java/fan/ovo/hwsign/AuthService.kt
@@ -0,0 +1,212 @@
+package fan.ovo.hwsign
+
+import android.content.Context
+import androidx.core.content.edit
+import androidx.security.crypto.EncryptedSharedPreferences
+import androidx.security.crypto.MasterKey
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.withContext
+import okhttp3.*
+import okhttp3.MediaType.Companion.toMediaType
+import okhttp3.RequestBody.Companion.toRequestBody
+import org.json.JSONObject
+import java.io.IOException
+import java.util.Base64
+import java.util.concurrent.TimeUnit
+import kotlin.coroutines.resume
+import kotlin.coroutines.resumeWithException
+import kotlin.coroutines.suspendCoroutine
+
+class AuthService(private val context: Context) {
+    // Constants
+    private val baseUrl = "https://dbcs-api.ovo.fan"
+    private val jsonContentType = "application/json; charset=utf-8".toMediaType()
+    private val keyAuthToken = "auth_token"
+    
+    // Key management
+    public val keyManager = KeyManager(context)
+    
+    // Lazy initialization for network client
+    private val client by lazy {
+        OkHttpClient.Builder()
+            .connectTimeout(30, TimeUnit.SECONDS)
+            .readTimeout(30, TimeUnit.SECONDS)
+            .build()
+    }
+
+    private val sharedPreferences by lazy {
+        EncryptedSharedPreferences.create(
+            context,
+            "auth_prefs",
+            MasterKey.Builder(context)
+                .setKeyScheme(MasterKey.KeyScheme.AES256_GCM)
+                .build(),
+            EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV,
+            EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM
+        )
+    }
+
+    /**
+     * Store and retrieve auth token from encrypted preferences
+     */
+    private fun storeAuthToken(token: String) = 
+        sharedPreferences.edit { putString(keyAuthToken, token) }
+
+    private fun getAuthToken(): String? = 
+        sharedPreferences.getString(keyAuthToken, null)
+
+    /**
+     * Register a new user
+     */
+    suspend fun register(username: String, password: String): Boolean = 
+        withContext(Dispatchers.IO) {
+            try {
+                val json = JSONObject().apply {
+                    put("username", username)
+                    put("password", password)
+                }
+
+                val requestBody = json.toString().toRequestBody(jsonContentType)
+                val request = Request.Builder()
+                    .url("$baseUrl/register")
+                    .post(requestBody)
+                    .build()
+
+                val response = client.newCall(request).await()
+                
+                if (response.isSuccessful) {
+                    response.body?.string()?.let { body ->
+                        val jsonResponse = JSONObject(body)
+                        return@withContext jsonResponse.optString("message", "").isNotEmpty()
+                    }
+                }
+                false
+            } catch (e: Exception) {
+                e.printStackTrace()
+                false
+            }
+        }
+
+    /**
+     * Login using username/password and register hardware key
+     */
+    suspend fun login(username: String, password: String): Boolean = 
+        withContext(Dispatchers.IO) {
+            try {
+                // Generate new hardware key
+                val keyPair = keyManager.generateHardwareKey()
+                val publicKey = Base64.getEncoder().encodeToString(keyPair.public.encoded)
+
+                val json = JSONObject().apply {
+                    put("username", username)
+                    put("password", password)
+                }
+
+                val requestBody = json.toString().toRequestBody(jsonContentType)
+                val request = Request.Builder()
+                    .url("$baseUrl/login")
+                    .header("x-rpc-sec-bound-token-hw-pub", publicKey)
+                    .header("x-rpc-sec-bound-token-hw-pub-type", "ecdsa")
+                    .post(requestBody)
+                    .build()
+
+                val response = client.newCall(request).await()
+                
+                if (response.isSuccessful) {
+                    response.body?.string()?.let { body ->
+                        val jsonResponse = JSONObject(body)
+                        val token = jsonResponse.optString("token", "")
+                        if (token.isNotEmpty()) {
+                            storeAuthToken(token)
+                            // Clear any existing acceleration resources
+                            keyManager.clearAccelKeyId()
+                            return@withContext true
+                        }
+                    }
+                }
+                false
+            } catch (e: Exception) {
+                e.printStackTrace()
+                false
+            }
+        }
+
+    /**
+     * Check authentication status and manage acceleration keys
+     */
+    suspend fun checkAuthentication(): Boolean = withContext(Dispatchers.IO) {
+        val token = getAuthToken() ?: return@withContext false
+        val timestamp = System.currentTimeMillis().toString()
+
+        try {
+            val accelKeyId = keyManager.getAccelKeyId()
+            val requestBuilder = Request.Builder()
+                .url("$baseUrl/authenticated")
+                .header("Authorization", "Bearer $token")
+                .header("x-rpc-sec-bound-token-data", timestamp)
+
+            if (accelKeyId != null) {
+                // Use existing acceleration key
+                val keyPair = keyManager.getOrCreateAccelerationKey()
+                val signature = keyManager.signWithKey(keyPair, timestamp)
+                
+                requestBuilder
+                    .header("x-rpc-sec-bound-token-data-sig", signature)
+                    .header("x-rpc-sec-bound-token-accel-pub-id", accelKeyId)
+            } else {
+                // Generate a new acceleration key
+                val keyPair = keyManager.generateAccelerationKey()
+                
+                val accelPubKey = Base64.getEncoder().encodeToString(keyPair.public.encoded)
+                val accelPubKeySig = keyManager.signWithHardwareKey(accelPubKey)
+                val signature = keyManager.signWithKey(keyPair, timestamp)
+
+                requestBuilder
+                    .header("x-rpc-sec-bound-token-accel-pub", accelPubKey)
+                    .header("x-rpc-sec-bound-token-accel-pub-type", "ecdsa")
+                    .header("x-rpc-sec-bound-token-accel-pub-sig", accelPubKeySig)
+                    .header("x-rpc-sec-bound-token-data-sig", signature)
+            }
+
+            val request = requestBuilder.get().build()
+            val response = client.newCall(request).await()
+
+            if (response.isSuccessful) {
+                // Save acceleration key ID if this was a new key registration
+                response.header("x-rpc-sec-bound-token-accel-pub-id")?.let { newId ->
+                    keyManager.storeAccelKeyId(newId)
+                }
+                return@withContext true
+            }
+            false
+        } catch (e: Exception) {
+            e.printStackTrace()
+            false
+        }
+    }
+
+    /**
+     * Clear all stored credentials and keys
+     */
+    fun logout() {
+        sharedPreferences.edit { 
+            remove(keyAuthToken)
+        }
+        keyManager.clearKeys()
+    }
+
+    /**
+     * Extension function to simplify OkHttp async calls
+     */
+    private suspend fun Call.await(): Response = suspendCoroutine { continuation ->
+        this.enqueue(object : Callback {
+            override fun onResponse(call: Call, response: Response) {
+                continuation.resume(response)
+            }
+            
+            override fun onFailure(call: Call, e: IOException) {
+                continuation.resumeWithException(e)
+            }
+        })
+    }
+}
--- a/hw-sign-android/app/src/main/java/fan/ovo/hwsign/KeyManager.kt
+++ b/hw-sign-android/app/src/main/java/fan/ovo/hwsign/KeyManager.kt
@@ -0,0 +1,214 @@
+package fan.ovo.hwsign
+
+import android.annotation.SuppressLint
+import android.content.Context
+import android.os.Build
+import android.security.keystore.KeyGenParameterSpec
+import android.security.keystore.KeyProperties
+import android.security.keystore.KeyInfo
+import android.util.Log
+import androidx.core.content.edit
+import androidx.security.crypto.EncryptedSharedPreferences
+import androidx.security.crypto.MasterKey
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.withContext
+import java.security.KeyFactory
+import java.security.KeyPair
+import java.security.KeyPairGenerator
+import java.security.KeyStore
+import java.security.PrivateKey
+import java.security.Signature
+import java.security.spec.ECGenParameterSpec
+import java.util.Base64
+
+/**
+ * Manages cryptographic keys for hardware-backed authentication
+ */
+class KeyManager(private val context: Context) {
+
+    // Constants
+    private val keyAlias = "hw_sign_hardware_key"
+    private val keyAccelId = "accel_key_id"
+    
+    // Cache for acceleration keys
+    private var accelerationKeyPair: KeyPair? = null
+    
+    private val keystore by lazy {
+        KeyStore.getInstance("AndroidKeyStore").apply { load(null) }
+    }
+
+    private val sharedPreferences by lazy {
+        EncryptedSharedPreferences.create(
+            context,
+            "auth_prefs",
+            MasterKey.Builder(context)
+                .setKeyScheme(MasterKey.KeyScheme.AES256_GCM)
+                .build(),
+            EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV,
+            EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM
+        )
+    }
+
+    /**
+     * Check the security level of the hardware key
+     */
+    @SuppressLint("SwitchIntDef")
+    fun getKeySecurityLevel(): String {
+        return try {
+            val privateKey = keystore.getKey(keyAlias, null) as PrivateKey
+            val keyFactory = KeyFactory.getInstance(privateKey.algorithm, "AndroidKeyStore")
+            val keyInfo = keyFactory.getKeySpec(privateKey, KeyInfo::class.java) as KeyInfo
+
+            // Acceptable value: StrongBox, TEE, SecureHardware.
+            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.S) {
+                when (keyInfo.securityLevel) {
+                    KeyProperties.SECURITY_LEVEL_STRONGBOX -> "StrongBox"
+                    KeyProperties.SECURITY_LEVEL_TRUSTED_ENVIRONMENT -> "TEE"
+                    KeyProperties.SECURITY_LEVEL_UNKNOWN_SECURE -> "UnknownSecure"
+                    KeyProperties.SECURITY_LEVEL_SOFTWARE -> "Software"
+                    KeyProperties.SECURITY_LEVEL_UNKNOWN -> "Unknown"
+                    else -> "Unknown"
+                }
+            } else {
+                if (keyInfo.isInsideSecureHardware) {
+                    "SecureHardware"
+                } else {
+                    "Insecure"
+                }
+            }
+        } catch (e: Exception) {
+            e.printStackTrace()
+            "Unknown"
+        }
+    }
+
+    /**
+     * Generate a hardware-backed key pair using AndroidKeyStore
+     * Attempts to use StrongBox if available, falls back to TEE
+     */
+    suspend fun generateHardwareKey(): KeyPair = withContext(Dispatchers.IO) {
+        // Delete any existing key
+        if (keystore.containsAlias(keyAlias)) {
+            keystore.deleteEntry(keyAlias)
+        }
+
+        val keyPairGenerator = KeyPairGenerator.getInstance(
+            KeyProperties.KEY_ALGORITHM_EC, "AndroidKeyStore"
+        )
+
+        val builder = KeyGenParameterSpec.Builder(
+            keyAlias, KeyProperties.PURPOSE_SIGN or KeyProperties.PURPOSE_VERIFY
+        ).apply {
+            setDigests(KeyProperties.DIGEST_SHA256)
+            setUserAuthenticationRequired(false)
+            setUnlockedDeviceRequired(true)
+        }
+
+        var keyPair: KeyPair
+        // First try StrongBox if available (API 28+)
+        try {
+            builder.setIsStrongBoxBacked(true)
+            keyPairGenerator.initialize(builder.build())
+            keyPair = keyPairGenerator.generateKeyPair()
+        } catch (e: Exception) {
+            // Initialize with TEE fallback
+            builder.setIsStrongBoxBacked(false)
+            keyPairGenerator.initialize(builder.build())
+            keyPair = keyPairGenerator.generateKeyPair()
+        }
+
+        val keyLevel = getKeySecurityLevel()
+        Log.i(null, "successfully generated key pair in $keyLevel")
+        keyPair
+    }
+
+    /**
+     * Retrieve the existing hardware key pair from the Android KeyStore
+     */
+    private fun getHardwareKeyPair(): KeyPair? = try {
+        if (keystore.containsAlias(keyAlias)) {
+            val privateKey = keystore.getKey(keyAlias, null) as PrivateKey
+            val publicKey = keystore.getCertificate(keyAlias).publicKey
+            KeyPair(publicKey, privateKey)
+        } else {
+            null
+        }
+    } catch (e: Exception) {
+        e.printStackTrace()
+        null
+    }
+
+    /**
+     * Store and retrieve acceleration key ID
+     */
+    fun storeAccelKeyId(keyId: String) {
+        sharedPreferences.edit { putString(keyAccelId, keyId) }
+    }
+
+    fun getAccelKeyId(): String? = 
+        sharedPreferences.getString(keyAccelId, null)
+
+    fun clearAccelKeyId() {
+        sharedPreferences.edit { remove(keyAccelId) }
+    }
+
+    /**
+     * Sign data using the hardware key
+     */
+    suspend fun signWithHardwareKey(data: String): String = withContext(Dispatchers.IO) {
+        val keyPair = getHardwareKeyPair() ?: throw SecurityException("Hardware key not found")
+        
+        val signature = Signature.getInstance("SHA256withECDSA").apply {
+            initSign(keyPair.private)
+            update(data.toByteArray())
+        }
+        
+        Base64.getEncoder().encodeToString(signature.sign())
+    }
+
+    /**
+     * Generate an acceleration key pair in memory
+     */
+    fun generateAccelerationKey(): KeyPair {
+        val keyPair = KeyPairGenerator.getInstance("EC").apply {
+            initialize(ECGenParameterSpec("secp256r1"))
+        }.generateKeyPair()
+        
+        accelerationKeyPair = keyPair
+        return keyPair
+    }
+
+    /**
+     * Get the cached acceleration key pair or generate a new one
+     */
+    fun getOrCreateAccelerationKey(): KeyPair {
+        return accelerationKeyPair ?: generateAccelerationKey()
+    }
+
+    /**
+     * Sign data with a specific key pair
+     */
+    fun signWithKey(keyPair: KeyPair, data: String): String {
+        val signature = Signature.getInstance("SHA256withECDSA").apply {
+            initSign(keyPair.private)
+            update(data.toByteArray())
+        }
+        return Base64.getEncoder().encodeToString(signature.sign())
+    }
+
+    /**
+     * Clear stored keys and identifiers
+     */
+    fun clearKeys() {
+        accelerationKeyPair = null
+        clearAccelKeyId()
+        
+        try {
+            if (keystore.containsAlias(keyAlias)) {
+                keystore.deleteEntry(keyAlias)
+            }
+        } catch (e: Exception) {
+            e.printStackTrace()
+        }
+    }
+}
--- a/hw-sign-android/app/src/main/java/fan/ovo/hwsign/MainActivity.kt
+++ b/hw-sign-android/app/src/main/java/fan/ovo/hwsign/MainActivity.kt
@@ -0,0 +1,115 @@
+package fan.ovo.hwsign
+
+import android.os.Bundle
+import androidx.activity.ComponentActivity
+import androidx.activity.compose.setContent
+import androidx.activity.enableEdgeToEdge
+import androidx.compose.foundation.layout.*
+import androidx.compose.foundation.layout.fillMaxSize
+import androidx.compose.foundation.layout.padding
+import androidx.compose.material3.Button
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.material3.OutlinedTextField
+import androidx.compose.material3.Scaffold
+import androidx.compose.material3.Text
+import androidx.compose.runtime.*
+import androidx.compose.ui.Alignment
+import androidx.compose.ui.Modifier
+import androidx.compose.ui.tooling.preview.Preview
+import androidx.compose.ui.unit.dp
+import androidx.lifecycle.lifecycleScope
+import kotlinx.coroutines.launch
+import fan.ovo.hwsign.ui.theme.DbcsTheme
+
+class MainActivity : ComponentActivity() {
+    private lateinit var authService: AuthService
+
+    override fun onCreate(savedInstanceState: Bundle?) {
+        super.onCreate(savedInstanceState)
+        enableEdgeToEdge()
+        authService = AuthService(this)
+
+        setContent {
+            DbcsTheme {
+                Scaffold(modifier = Modifier.fillMaxSize()) { innerPadding ->
+                    var username by remember { mutableStateOf("") }
+                    var password by remember { mutableStateOf("") }
+                    var message by remember { mutableStateOf("") }
+                    var securityLevel by remember { mutableStateOf("Unknown") }
+
+                    Column(
+                        modifier = Modifier
+                            .padding(innerPadding)
+                            .fillMaxSize()
+                            .padding(16.dp),
+                        verticalArrangement = Arrangement.Center,
+                        horizontalAlignment = Alignment.CenterHorizontally
+                    ) {
+                        OutlinedTextField(
+                            value = username,
+                            onValueChange = { username = it },
+                            label = { Text("Username") },
+                            modifier = Modifier.fillMaxWidth()
+                        )
+                        Spacer(modifier = Modifier.height(8.dp))
+                        OutlinedTextField(
+                            value = password,
+                            onValueChange = { password = it },
+                            label = { Text("Password") },
+                            modifier = Modifier.fillMaxWidth()
+                        )
+                        Spacer(modifier = Modifier.height(16.dp))
+                        Button(onClick = {
+                            lifecycleScope.launch {
+                                val success = authService.login(username, password)
+                                message = if (success) "Login successful!" else "Login failed."
+                                securityLevel = authService.keyManager.getKeySecurityLevel()
+                            }
+                        }) {
+                            Text("Login")
+                        }
+                        Spacer(modifier = Modifier.height(8.dp))
+                        Button(onClick = {
+                            lifecycleScope.launch {
+                                val success = authService.register(username, password)
+                                message = if (success) "Registration successful!" else "Registration failed."
+                            }
+                        }) {
+                            Text("Register")
+                        }
+                        Spacer(modifier = Modifier.height(8.dp))
+                        Button(onClick = {
+                            lifecycleScope.launch {
+                                val isAuthenticated = authService.checkAuthentication()
+                                message = if (isAuthenticated) "Authenticated!" else "Not authenticated."
+                            }
+                        }) {
+                            Text("Check Auth")
+                        }
+                        Spacer(modifier = Modifier.height(16.dp))
+                        Text("Security Level: $securityLevel", style = MaterialTheme.typography.bodyLarge)
+                        Spacer(modifier = Modifier.height(16.dp))
+                        Text(message)
+                    }
+                }
+            }
+        }
+    }
+}
+
+@Composable
+fun Greeting(name: String, modifier: Modifier = Modifier) {
+    Text(
+        text = "Hello $name!",
+        style = MaterialTheme.typography.titleLarge,
+        modifier = modifier
+    )
+}
+
+@Preview(showBackground = true)
+@Composable
+fun GreetingPreview() {
+    DbcsTheme {
+        Greeting("DBCS")
+    }
+}
--- a/hw-sign-android/app/src/main/java/fan/ovo/hwsign/ui/theme/Color.kt
+++ b/hw-sign-android/app/src/main/java/fan/ovo/hwsign/ui/theme/Color.kt
@@ -0,0 +1,11 @@
+package fan.ovo.hwsign.ui.theme
+
+import androidx.compose.ui.graphics.Color
+
+val Purple80 = Color(0xFFD0BCFF)
+val PurpleGrey80 = Color(0xFFCCC2DC)
+val Pink80 = Color(0xFFEFB8C8)
+
+val Purple40 = Color(0xFF6650a4)
+val PurpleGrey40 = Color(0xFF625b71)
+val Pink40 = Color(0xFF7D5260)
--- a/hw-sign-android/app/src/main/java/fan/ovo/hwsign/ui/theme/Theme.kt
+++ b/hw-sign-android/app/src/main/java/fan/ovo/hwsign/ui/theme/Theme.kt
@@ -0,0 +1,58 @@
+package fan.ovo.hwsign.ui.theme
+
+import android.app.Activity
+import android.os.Build
+import androidx.compose.foundation.isSystemInDarkTheme
+import androidx.compose.material3.MaterialTheme
+import androidx.compose.material3.darkColorScheme
+import androidx.compose.material3.dynamicDarkColorScheme
+import androidx.compose.material3.dynamicLightColorScheme
+import androidx.compose.material3.lightColorScheme
+import androidx.compose.runtime.Composable
+import androidx.compose.ui.platform.LocalContext
+
+private val DarkColorScheme = darkColorScheme(
+    primary = Purple80,
+    secondary = PurpleGrey80,
+    tertiary = Pink80
+)
+
+private val LightColorScheme = lightColorScheme(
+    primary = Purple40,
+    secondary = PurpleGrey40,
+    tertiary = Pink40
+
+    /* Other default colors to override
+    background = Color(0xFFFFFBFE),
+    surface = Color(0xFFFFFBFE),
+    onPrimary = Color.White,
+    onSecondary = Color.White,
+    onTertiary = Color.White,
+    onBackground = Color(0xFF1C1B1F),
+    onSurface = Color(0xFF1C1B1F),
+    */
+)
+
+@Composable
+fun DbcsTheme(
+    darkTheme: Boolean = isSystemInDarkTheme(),
+    // Dynamic color is available on Android 12+
+    dynamicColor: Boolean = true,
+    content: @Composable () -> Unit
+) {
+    val colorScheme = when {
+        dynamicColor && Build.VERSION.SDK_INT >= Build.VERSION_CODES.S -> {
+            val context = LocalContext.current
+            if (darkTheme) dynamicDarkColorScheme(context) else dynamicLightColorScheme(context)
+        }
+
+        darkTheme -> DarkColorScheme
+        else -> LightColorScheme
+    }
+
+    MaterialTheme(
+        colorScheme = colorScheme,
+        typography = Typography,
+        content = content
+    )
+}
--- a/hw-sign-android/app/src/main/java/fan/ovo/hwsign/ui/theme/Type.kt
+++ b/hw-sign-android/app/src/main/java/fan/ovo/hwsign/ui/theme/Type.kt
@@ -0,0 +1,25 @@
+package fan.ovo.hwsign.ui.theme
+
+import androidx.compose.material3.Typography
+import androidx.compose.ui.text.TextStyle
+import androidx.compose.ui.text.font.FontFamily
+import androidx.compose.ui.text.font.FontWeight
+import androidx.compose.ui.unit.sp
+
+// Set of Material typography styles to start with
+val Typography = Typography(
+    bodyLarge = TextStyle(
+        fontFamily = FontFamily.Default,
+        fontWeight = FontWeight.Normal,
+        fontSize = 16.sp,
+        lineHeight = 24.sp,
+        letterSpacing = 0.5.sp
+    ),
+    titleLarge = TextStyle(
+        fontFamily = FontFamily.Default,
+        fontWeight = FontWeight.Bold,
+        fontSize = 22.sp,
+        lineHeight = 28.sp,
+        letterSpacing = 0.sp
+    )
+)
--- a/hw-sign-android/app/src/main/res/drawable/ic_launcher_background.xml
+++ b/hw-sign-android/app/src/main/res/drawable/ic_launcher_background.xml
@@ -0,0 +1,170 @@
+<?xml version="1.0" encoding="utf-8"?>
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="108dp"
+    android:height="108dp"
+    android:viewportWidth="108"
+    android:viewportHeight="108">
+    <path
+        android:fillColor="#3DDC84"
+        android:pathData="M0,0h108v108h-108z" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M9,0L9,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,0L19,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M29,0L29,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M39,0L39,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M49,0L49,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M59,0L59,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M69,0L69,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M79,0L79,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M89,0L89,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M99,0L99,108"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,9L108,9"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,19L108,19"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,29L108,29"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,39L108,39"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,49L108,49"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,59L108,59"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,69L108,69"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,79L108,79"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,89L108,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M0,99L108,99"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,29L89,29"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,39L89,39"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,49L89,49"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,59L89,59"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,69L89,69"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M19,79L89,79"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M29,19L29,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M39,19L39,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M49,19L49,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M59,19L59,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M69,19L69,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+    <path
+        android:fillColor="#00000000"
+        android:pathData="M79,19L79,89"
+        android:strokeWidth="0.8"
+        android:strokeColor="#33FFFFFF" />
+</vector>
--- a/hw-sign-android/app/src/main/res/drawable/ic_launcher_foreground.xml
+++ b/hw-sign-android/app/src/main/res/drawable/ic_launcher_foreground.xml
@@ -0,0 +1,30 @@
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:aapt="http://schemas.android.com/aapt"
+    android:width="108dp"
+    android:height="108dp"
+    android:viewportWidth="108"
+    android:viewportHeight="108">
+    <path android:pathData="M31,63.928c0,0 6.4,-11 12.1,-13.1c7.2,-2.6 26,-1.4 26,-1.4l38.1,38.1L107,108.928l-32,-1L31,63.928z">
+        <aapt:attr name="android:fillColor">
+            <gradient
+                android:endX="85.84757"
+                android:endY="92.4963"
+                android:startX="42.9492"
+                android:startY="49.59793"
+                android:type="linear">
+                <item
+                    android:color="#44000000"
+                    android:offset="0.0" />
+                <item
+                    android:color="#00000000"
+                    android:offset="1.0" />
+            </gradient>
+        </aapt:attr>
+    </path>
+    <path
+        android:fillColor="#FFFFFF"
+        android:fillType="nonZero"
+        android:pathData="M65.3,45.828l3.8,-6.6c0.2,-0.4 0.1,-0.9 -0.3,-1.1c-0.4,-0.2 -0.9,-0.1 -1.1,0.3l-3.9,6.7c-6.3,-2.8 -13.4,-2.8 -19.7,0l-3.9,-6.7c-0.2,-0.4 -0.7,-0.5 -1.1,-0.3C38.8,38.328 38.7,38.828 38.9,39.228l3.8,6.6C36.2,49.428 31.7,56.028 31,63.928h46C76.3,56.028 71.8,49.428 65.3,45.828zM43.4,57.328c-0.8,0 -1.5,-0.5 -1.8,-1.2c-0.3,-0.7 -0.1,-1.5 0.4,-2.1c0.5,-0.5 1.4,-0.7 2.1,-0.4c0.7,0.3 1.2,1 1.2,1.8C45.3,56.528 44.5,57.328 43.4,57.328L43.4,57.328zM64.6,57.328c-0.8,0 -1.5,-0.5 -1.8,-1.2s-0.1,-1.5 0.4,-2.1c0.5,-0.5 1.4,-0.7 2.1,-0.4c0.7,0.3 1.2,1 1.2,1.8C66.5,56.528 65.6,57.328 64.6,57.328L64.6,57.328z"
+        android:strokeWidth="1"
+        android:strokeColor="#00000000" />
+</vector>
--- a/hw-sign-android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml
+++ b/hw-sign-android/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<adaptive-icon xmlns:android="http://schemas.android.com/apk/res/android">
+    <background android:drawable="@drawable/ic_launcher_background" />
+    <foreground android:drawable="@drawable/ic_launcher_foreground" />
+    <monochrome android:drawable="@drawable/ic_launcher_foreground" />
+</adaptive-icon>
--- a/hw-sign-android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml
+++ b/hw-sign-android/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<adaptive-icon xmlns:android="http://schemas.android.com/apk/res/android">
+    <background android:drawable="@drawable/ic_launcher_background" />
+    <foreground android:drawable="@drawable/ic_launcher_foreground" />
+    <monochrome android:drawable="@drawable/ic_launcher_foreground" />
+</adaptive-icon>
--- a/hw-sign-android/app/src/main/res/mipmap-hdpi/ic_launcher.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-hdpi/ic_launcher.webp
--- a/hw-sign-android/app/src/main/res/mipmap-hdpi/ic_launcher_round.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-hdpi/ic_launcher_round.webp
--- a/hw-sign-android/app/src/main/res/mipmap-mdpi/ic_launcher.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-mdpi/ic_launcher.webp
--- a/hw-sign-android/app/src/main/res/mipmap-mdpi/ic_launcher_round.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-mdpi/ic_launcher_round.webp
--- a/hw-sign-android/app/src/main/res/mipmap-xhdpi/ic_launcher.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-xhdpi/ic_launcher.webp
--- a/hw-sign-android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-xhdpi/ic_launcher_round.webp
--- a/hw-sign-android/app/src/main/res/mipmap-xxhdpi/ic_launcher.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-xxhdpi/ic_launcher.webp
--- a/hw-sign-android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.webp
--- a/hw-sign-android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.webp
--- a/hw-sign-android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.webp
+++ b/hw-sign-android/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.webp
--- a/hw-sign-android/app/src/main/res/values/colors.xml
+++ b/hw-sign-android/app/src/main/res/values/colors.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <color name="purple_200">#FFBB86FC</color>
+    <color name="purple_500">#FF6200EE</color>
+    <color name="purple_700">#FF3700B3</color>
+    <color name="teal_200">#FF03DAC5</color>
+    <color name="teal_700">#FF018786</color>
+    <color name="black">#FF000000</color>
+    <color name="white">#FFFFFFFF</color>
+</resources>
--- a/hw-sign-android/app/src/main/res/values/strings.xml
+++ b/hw-sign-android/app/src/main/res/values/strings.xml
@@ -0,0 +1,3 @@
+<resources>
+    <string name="app_name">dbcs</string>
+</resources>
--- a/hw-sign-android/app/src/main/res/values/themes.xml
+++ b/hw-sign-android/app/src/main/res/values/themes.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+
+    <style name="Theme.Dbcs" parent="android:Theme.Material.Light.NoActionBar" />
+</resources>
--- a/hw-sign-android/app/src/main/res/xml/backup_rules.xml
+++ b/hw-sign-android/app/src/main/res/xml/backup_rules.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+   Sample backup rules file; uncomment and customize as necessary.
+   See https://developer.android.com/guide/topics/data/autobackup
+   for details.
+   Note: This file is ignored for devices older than API 31
+   See https://developer.android.com/about/versions/12/backup-restore
+-->
+<full-backup-content>
+    <!--
+   <include domain="sharedpref" path="."/>
+   <exclude domain="sharedpref" path="device.xml"/>
+-->
+</full-backup-content>
--- a/hw-sign-android/app/src/main/res/xml/data_extraction_rules.xml
+++ b/hw-sign-android/app/src/main/res/xml/data_extraction_rules.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="utf-8"?><!--
+   Sample data extraction rules file; uncomment and customize as necessary.
+   See https://developer.android.com/about/versions/12/backup-restore#xml-changes
+   for details.
+-->
+<data-extraction-rules>
+    <cloud-backup>
+        <!-- TODO: Use <include> and <exclude> to control what is backed up.
+        <include .../>
+        <exclude .../>
+        -->
+    </cloud-backup>
+    <!--
+    <device-transfer>
+        <include .../>
+        <exclude .../>
+    </device-transfer>
+    -->
+</data-extraction-rules>