auth/com.midnight.kuira.core.auth/WalletKeyManager/cipherForEncrypt

cipherForEncrypt

fun cipherForEncrypt(): Cipher

Creates a Cipher initialized for encryption with the master key.

The returned cipher has a Keystore-generated random IV accessible via Cipher.getIV. Wrap this in a BiometricPrompt.CryptoObject before authenticating.

After successful biometric auth, call Cipher.doFinal with the plaintext. Store the result as: [IV (12 bytes)] + [ciphertext + GCM tag (16 bytes)]