otpGarmin - OTP Wallet for Garmin Connect IQ: offline one-time passwords and barcodes.

	Commit message (Collapse)	Author	Age	Files	Lines
*	feat(storage): add keyed secret fingerprints to record headers	cirakg	10 days	1	-0/+3
\| \| \| \| \| \| \| \|	An 8-byte HMAC of kind, type and secret (key derived from the device key) in header tag 13 lets imports find duplicates of locked entries while the watch is locked. Vault gains anyHeader() and storage(). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
*	feat(storage): add the encrypted vault, PIN keys, lockout, session and ↵	cirakg	10 days	1	-0/+149
	migrations Records are one ByteArray each: a readable TLV header plus an encrypt-then-MAC box whose aad binds the entry ID and the header. The device key seals unlocked entries and pending items; a random master key, wrapped under a PBKDF2 PIN key, seals locked ones. Wrong PINs are counted before the check, with delays on the trusted clock and an uptime fallback. Bytes.toUtf8 validates UTF-8 first, because the native conversion crashes on invalid input. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>