[BUG] java.security.ProviderException: Keystore key generation failed in Xiaomi Second Space (App Transferred from First Space).

[djekgog]

First of all, I’d like to congratulate you for your excellent work and the continuous evolution of AirGap products, especially with your two softwares AirGap Wallet and Vault. Thanks to them we can install our own cold wallet. Great initiative.

That said, I’d like to respectfully suggest that you consider an issue on Xiaomi second space.

Description of the Issue:
I am experiencing a persistent error when trying to save my secret (mnemonic/seed phrase) with an encryption password in AirGap Vault on a Xiaomi phone, specifically within its "Second Space" feature. The application displays a generic "Something went wrong!" error message, and the detailed error history shows java.security.ProviderException: Keystore key generation failed.

This issue prevents me from proceeding with securing my seed phrase within the AirGap Vault application in this isolated environment.

Steps to Reproduce:

• On a Xiaomi Mi 10T Lite phone, I first downloaded and installed AirGap Vault from Google Play Store on the First Space (main environment).
• Then, I enabled Airplane Mode on the phone.
• I switched to the Second Space environment, where I have no connection account.
• Within the Second Space, while still in Airplane Mode, I navigated to: Settings > Special features > Second Space > Data sharing, and transferred AirGap Vault exclusively from the First Space to the Second Space.
• Still in Second Space and Airplane Mode, I launched AirGap Vault to proceed with its setup/configuration.
• I reached the "Save Your Secret" screen, where an "encryption password" is requested.
• I entered and confirmed various encryption passwords (e.g., "test1234", "DGEair579", or any other password meeting the "at least 4 characters" requirement).
• Upon attempting to confirm the password, the error occurred.

Expected Behavior:
The secret should be successfully encrypted and saved, allowing the user to proceed.

Observed Behavior:
An error pop-up appears stating "Something went wrong!". The error history details java.security.ProviderException: Keystore key generation failed.
Troubleshooting Steps Taken:

• Attempted multiple password formats (alphanumeric, with special characters, varying lengths, all meeting the minimum 4 characters).
• Restarted the phone.
• Cleared the app cache and data for AirGap Vault.
• "Reset" AirGap Vault within its internal settings.

Environment Details:

• Device: Xiaomi Mi 10T Lite
• Android Version: Android 12,
• MIUI Version: MIUI 13,
• AirGap Vault Version: AirGap Vault 3.32.7 (build 68124),
• Specific Feature: Occurs within Xiaomi's "Second Space" feature, with the app transferred from the First Space.

Attachments:

• Screenshot 1: "Enter your encryption password" screen.
  

• Screenshot 2: "Error: Something went wrong!" pop-up.
  

• Screenshot 3: "Error History" showing java.security.ProviderException: Keystore key generation failed.
  

• Screenshot 4: Xiaomi MIUI and Android version,
  

• Screenshot 5: AirGap Vault version,
  

Thank you for your time and assistance in looking into this issue.

Sincerely.

Djekou GOGOA
From Abidjan, Côte d’Ivoire.
djekou.gogoa@gmail.com

[debeldami]

Hi, I'm assuming the second space environment is similar to Samsung Secure Folder? If so, does the issue occur only in the second space, or does it work correctly in the primary (first) space?

Unfortunately, we do not have access to that specific device to reproduce the issue. However, I tested it within Samsung Secure Folder, and it appears to be working as expected.

[djekgog]

Hello.
Thank you for your reply.

Yes, you're right. Xiaomi's Second Space is conceptually similar to Samsung's Secure Folder.

To clarify, I have personally tested "AirGap Vault" within Samsung's "Secure Folder" (on a Galaxy S23 Ultra), and it works correctly :

• The encryption password step completes successfully;
• The vault is initialized and usable offline;
• No Keystore error occurs.

However, on "Xiaomi Mi 10T Lite" (Android 12, MIUI 13), the issue occurs only in the "Second Space", even after:

• Creating a Google account within that Second Space;
• Downloading AirGap Vault directly from Google Play;
• Switching to Airplane Mode before launching the app.

During the "Save your secret" step, the following error appears: 《java.security.ProviderException: Keystore key generation failed》

I have tested with various password formats (numeric, alphanumeric, special characters), but the problem persists.

In the "Primary Space", the app works normally.

So the issue seems isolated to "Xiaomi's Second Space environment", where access to Android Keystore appears to be restricted by MIUI.

If you ever consider implementing a software-based fallback encryption mode for such restricted environments, I’d be glad to help test it.

Thanks again for your excellent work and for taking the time to respond.

Best regards.

Djekou GOGOA
Abidjan, Côte d'Ivoire