Biometric authentication - Why do we need it?
Jan 20, 2022Chad Burgess

Summary
This post details the technical implementation of biometric authentication, focusing on the use of device-specific secure enclaves and public/private key pairs for client-server trust establishment. It outlines the enrollment flow, including key generation, user authentication via biometrics, payload signing, and storing reference IDs. Key implementation details such as checking for rooted devices, using SHA512withECDSA, and storing data in encrypted shared preferences/keychain are also covered. The post highlights the impact of reducing user friction and SMS OTP costs, with an estimated 90% adoption and success rate.