@icedevml/react-native-host-card-emulation 0.4.0 → 0.4.1

package/README.md

@@ -23,7 +23,17 @@ Make sure that your project has it enabled. Note that the New Architecture is en
 *(no prerequisite steps are required for Android)*
 
 ## Installation
-Install `@icedevml/react-native-host-card-emulation` package within your React Native project. Then, follow the subsections below for each platform that you need to support.
+Install this package within your React Native project:
+
+```
+yarn add @icedevml/react-native-host-card-emulation
+```
+or using npm
+```
+npm install --save @icedevml/react-native-host-card-emulation
+```
+
+Afterwards, follow the subsections below for each platform that you need to support.
 
 ### iOS
 1. Make sure to set up a proper signing team and bundle identifier in "Signing & Capabilities" configuration section of your project.
@@ -54,7 +64,9 @@ Install `@icedevml/react-native-host-card-emulation` package within your React N
       ...
 
    +  <uses-permission android:name="android.permission.NFC" />
-   +  <uses-feature android:name="android.hardware.nfc.hce" android:required="true" />
+   +  <uses-feature android:name="android.hardware.nfc.hce" android:required="false" />
+   +  <permission android:name="com.itsecrnd.rtnhceandroid.HCE_BROADCAST" android:protectionLevel="signature" />
+   +  <uses-permission android:name="com.itsecrnd.rtnhceandroid.HCE_BROADCAST"/>
 
       ...
 
@@ -65,10 +77,10 @@ Install `@icedevml/react-native-host-card-emulation` package within your React N
         ...
    
    +    <service
-   +      android:name="com.itsecrnd.rtnhceandroid.HCEService"
+   +      android:name="com.itsecrnd.rtnhceandroid.service.HCEService"
    +      android:exported="true"
    +      android:enabled="true"
-   +      android:permission="android.permission.BIND_NFC_SERVICE" >
+   +      android:permission="android.permission.BIND_NFC_SERVICE">
    +      <intent-filter>
    +        <action android:name="android.nfc.cardemulation.action.HOST_APDU_SERVICE" />
    +        <category android:name="android.intent.category.DEFAULT"/>
@@ -100,19 +112,35 @@ Install `@icedevml/react-native-host-card-emulation` package within your React N
 
 This module provides a uniform low-level HCE API for both mobile platforms.
 
-1. Subscribe to the event stream (there is a single global event stream for the entire module):
+> [!NOTE]
+> Raw native module's API specification is available in [packages/native-hce-module/js/NativeHCEModule.ts](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/native-hce-module/js/NativeHCEModule.ts).
+> Check it out in order to understand what methods you can call against the module and what are the expected parameters/return values.
+
+> [!NOTE]
+> See [Demo App's Code (Example Library Usage)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/demo-hce-module-app/App.tsx) example for more insignt about the library's API.
+
+### Quick start guide
+
+1. Subscribe to the event stream. There is a single global event stream, so you can subscribe early and remain subscribed to events for the entire application's lifetime.
    ```typescript
-   NativeHCEModule?.onEvent(async (event: HCEModuleEvent) => {
-       switch (event.type) {
-           /* ... your handler here ... */
+   useEffect(() => {
+       const removeListener = NativeHCEModule?.onEvent(async (event: HCEModuleEvent) => {
+           switch (event.type) {
+               /* ... implement event handlers here ... */
+           }
+       });
+
+       // cleanup the event listener when the effect is unmounted
+       return () => {
+           removeListener();
        }
-   });
+   }, []);
    ```
-2. When user indicates that he wants to perform the HCE action, call the following function from the button's onClick routine:
+2. When user indicates that he/she wants to perform the HCE action, call the following function from the button's onClick routine:
    ```typescript
    await NativeHCEModule?.beginSession();
    ```
-   This will emit `sessionStarted` event on both platforms. You can start the HCE straight from that event:
+   This will emit `sessionStarted` event right after the function call, on both iOS and Android platforms. After the session is started, you can decide to start HCE emulation right away in the event handler:
    ```typescript
    // inside NativeHCEModule?.onEvent handler's switch
    case 'sessionStarted':
@@ -120,10 +148,10 @@ This module provides a uniform low-level HCE API for both mobile platforms.
        await NativeHCEModule?.startHCE();
        break;
    ```
-3. Calling `startHCE()` causes:
-   * iOS: Launch of the NFC scan system UI. The smartphone will start listening for C-APDUs from the readers right after that UI appears on screen. The `readerDetected` event will be emitted as soon as the NFC tag field presence is observed. The `readerDeselected` event will be emitted if the reader is physically disconnected or a non-matching AID is selected by the reader.
-   * Android: No user interface appears (you have to implement it on your own scanning UI, within your app). The `readerDetected` event will be emitted as soon as the first matching SELECT AID command is observed. The `readerDeselected` event will be emitted if the reader is physically disconnected or a non-matching AID is selected by the reader.
-4. Optionally, you can handle `readerDetected` and `readerDeselected events to enhance user's experience.
+   Calling `await NativeHCEModule?.startHCE()` causes:
+   * iOS: Your smartphone will start listening for C-APDUs (Command APDUs originating from reader devices) right after that function is called, which will be additionally indicated by the operating system popping out the NFC scanning user interface prompt.
+   * Android: HCE commands will be forwarded to your application from that point on. No specific user interface is displayed (you have to implement it on your own, within your app).
+3. Optionally, you can handle `readerDetected` and `readerDeselected` events to enhance user's experience.
    ```typescript
    // inside NativeHCEModule?.onEvent handler's switch
    case 'readerDetected':
@@ -134,29 +162,40 @@ This module provides a uniform low-level HCE API for both mobile platforms.
         NativeHCEModule?.setSessionAlertMessage('Lost reader');  // only for iOS, no-op in Android
         break;
    ```
-5. Handle CAPDU
+   For those events, trigger mechanisms are platform dependent:
+   * iOS: The `readerDetected` event will be emitted as soon as the NFC tag field presence is observed. The `readerDeselected` event will be emitted if the reader is physically disconnected or a non-matching AID is selected by the reader.
+   * Android: The `readerDetected` event will be emitted as soon as the first matching SELECT AID command is observed. The `readerDeselected` event will be emitted if the reader is physically disconnected or a non-matching AID is selected by the reader.
+4. Receive incoming C-APDU and respond to it:
    ```typescript
    // inside NativeHCEModule?.onEvent handler's switch
    case 'received':
-       NativeHCEModule?.setSessionAlertMessage('Keep holding the tag');
+       NativeHCEModule?.setSessionAlertMessage('Keep holding the tag');  // only for iOS, no-op on Android
 
+       // decode incoming C-APDU to bytes
        const capdu = Buffer.from(event.arg!, 'hex');
        console.log('Received C-APDU, capdu.toString('hex'));
    
-       // let's say we always want to respond with [0x0A] + Status Word 0x9000
+       // for the demo purposes, we always want to respond with [0x0A] + status code 0x9000 (success)
        await NativeHCEModule?.respondAPDU(Buffer.from([0x0A, 0x90, 0x00], "hex"));
        break;
    ```
-6. (iOS) Optionally, if you need to utilize `NFCPresentmentIntentAssertion` then at any time you can call:
-   ```typescript
-   NativeHCEModule?.acquireExclusiveNFC();
-   ```
-   Which will throw an exception if the presentment intent assertion was already acquired and is still valid 
-   (usually 15 seconds) or if the cooldown period for acquiring new assertion was not yet expired (usually also 15 seconds).
+   You don't have to respond to the APDU right away from within the event handler, but please remember that the reader might time out if you will be lingering with the response for too long.
 
-> [!NOTE]
-> See [Demo App's Code (Example Library Usage)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/demo-hce-module-app/App.tsx) example for more insignt about the library's API.
+### iOS: Acquiring exclusive NFC access
+If you need to utilize `NFCPresentmentIntentAssertion` for enhanced user experience, call:
+```typescript
+NativeHCEModule?.acquireExclusiveNFC();
+```
+This function will acquire an exclusive NFC access for 15 seconds. On system services or other applications will be able to interfere with NFC during that period. For example, the NFC background tag reading will be disabled so it would not generate any distracting notifications.
 
-> [!NOTE]
-> Raw native module's API specification is available in [packages/native-hce-module/js/NativeHCEModule.ts](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/native-hce-module/js/NativeHCEModule.ts).
-> Check it out in order to understand what methods you can call against the module and what are the expected parameters/return values.
+This function will throw an exception if:
+* the presentment intent assertion was already acquired and is still active;
+* you are in the cooldown period where you are not allowed to acquire the presentment intent assertion (cooldown is 15 seconds after the previous assertion had expired);
+* the feature is not supported or the device is not eligible for whatever reason;
+
+Call `NativeHCEModule?.isExclusiveNFC()` to check if exclusive NFC access is still active.
+
+### More resources
+
+* [Module's API specification](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/native-hce-module/js/NativeHCEModule.ts)
+* [Demo App's Code (Example Library Usage)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/demo-hce-module-app/App.tsx)

package/android/src/main/java/com/itsecrnd/rtnhceandroid/IntentKeys.java

@@ -1,11 +1,11 @@
 package com.itsecrnd.rtnhceandroid;
 
 public class IntentKeys {
+    public static final String PERMISSION_HCE_BROADCAST = "com.itsecrnd.rtnhceandroid.HCE_BROADCAST";
     public static final String ACTION_RECEIVE_C_APDU = "com.itsecrnd.rtnhceandroid.ACTION_RECEIVE_C_APDU";
     public static final String ACTION_SEND_R_APDU = "com.itsecrnd.rtnhceandroid.ACTION_SEND_R_APDU";
     public static final String ACTION_READER_DETECT = "com.itsecrnd.rtnhceandroid.ACTION_READER_DETECT";
     public static final String ACTION_READER_LOST = "com.itsecrnd.rtnhceandroid.ACTION_READER_LOST";
-    public static final String KEY_AUTH = "auth";
     public static final String KEY_CAPDU = "capdu";
     public static final String KEY_RAPDU = "rapdu";
 }

package/android/src/main/java/com/itsecrnd/rtnhceandroid/RTNHCEAndroidModule.java

@@ -5,9 +5,9 @@ import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_DETECT;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_LOST;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_RECEIVE_C_APDU;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_SEND_R_APDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.PERMISSION_HCE_BROADCAST;
 
 import android.content.BroadcastReceiver;
-import android.content.ComponentName;
 import android.content.Context;
 import android.content.Intent;
 import android.content.IntentFilter;
@@ -23,9 +23,6 @@ import com.facebook.react.bridge.Promise;
 import com.facebook.react.bridge.ReactApplicationContext;
 import com.facebook.react.bridge.WritableMap;
 
-import javax.crypto.SecretKey;
-
-@RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
 public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
     public static final String TAG = "RTNHCEAndroidModule";
     public static final String NAME = "NativeHCEModule";
@@ -34,7 +31,6 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
     private volatile boolean hceRunning;
     private volatile boolean hceBreakConnection;
     private volatile boolean hceDeselected;
-    private final SecretKey encSecretKey;
 
     private void sendEvent(final String type, final String arg) {
         WritableMap map = Arguments.createMap();
@@ -43,39 +39,46 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
         emitOnEvent(map);
     }
 
+    @RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
     private final BroadcastReceiver receiver = new BroadcastReceiver() {
         @Override
         public void onReceive(Context context, Intent intent) {
             try {
                 String action = intent.getAction();
 
-                if (action != null) {
-                    AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra("auth"));
-
-                    if (action.equals(ACTION_RECEIVE_C_APDU)) {
-                        String capdu = AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra("capdu"));
-
-                        if (!hceBreakConnection && hceRunning) {
-                            sendEvent("received", capdu);
-                        } else {
-                            Intent rintent = new Intent(ACTION_SEND_R_APDU);
-                            rintent.setPackage(getReactApplicationContext().getPackageName());
-                            rintent.putExtra("auth", AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-                            rintent.putExtra("rapdu", AESGCMUtil.encryptData(encSecretKey, "6999"));
-                            getReactApplicationContext().getApplicationContext().sendBroadcast(rintent);
-                        }
-                    } else if (hceRunning && action.equals(ACTION_READER_DETECT)) {
+                if (action == null) {
+                    Log.w(TAG, "Received intent with null action in module receiver.");
+                    return;
+                }
+
+                if (action.equals(ACTION_RECEIVE_C_APDU)) {
+                    String capdu = intent.getStringExtra("capdu");
+
+                    if (!hceBreakConnection && hceRunning) {
+                        sendEvent("received", capdu);
+                    } else {
+                        // HCE is already disabled or was just disabled while the HCEService was running
+                        // don't forward C-APDUs to the application and just respond 6999 to everything
+                        Intent rintent = new Intent(ACTION_SEND_R_APDU);
+                        rintent.setPackage(getReactApplicationContext().getPackageName());
+                        rintent.putExtra("rapdu", "6999");
+                        getReactApplicationContext().getApplicationContext().sendBroadcast(rintent, PERMISSION_HCE_BROADCAST);
+                    }
+                } else if (action.equals(ACTION_READER_DETECT)) {
+                    if (hceRunning) {
                         hceDeselected = false;
                         sendEvent("readerDetected", "");
-                    } else if (action.equals(ACTION_READER_LOST)) {
-                        if (hceRunning && !hceBreakConnection && !hceDeselected) {
-                            // only if we haven't send a fake disconnect event already
-                            hceDeselected = true;
-                            sendEvent("readerDeselected", "");
-                        }
-
-                        hceBreakConnection = false;
                     }
+                } else if (action.equals(ACTION_READER_LOST)) {
+                    if (hceRunning && !hceBreakConnection && !hceDeselected) {
+                        // only if we haven't send a fake disconnect event already
+                        hceDeselected = true;
+                        sendEvent("readerDeselected", "");
+                    }
+
+                    hceBreakConnection = false;
+                } else {
+                    Log.w(TAG, "Received unknown action intent in module receiver: " + action);
                 }
             } catch (Exception e) {
                 Log.e(TAG, "Failed to handle broadcast in RTNHCEAndroidModule.", e);
@@ -85,47 +88,33 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     RTNHCEAndroidModule(ReactApplicationContext context) {
         super(context);
-        String encKey;
+
         this.sessionRunning = false;
         this.hceRunning = false;
         this.hceBreakConnection = false;
         this.hceDeselected = true;
 
-        try {
-            encSecretKey = AESGCMUtil.generateKey();
-            encKey = BinaryUtils.ByteArrayToHexString(encSecretKey.getEncoded());
-        } catch (Exception e) {
-            throw new RuntimeException("Failed to generate encryption key.", e);
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
+            IntentFilter filter = new IntentFilter();
+            filter.addAction(ACTION_RECEIVE_C_APDU);
+            filter.addAction(ACTION_READER_DETECT);
+            filter.addAction(ACTION_READER_LOST);
+
+            getReactApplicationContext().getApplicationContext().registerReceiver(
+                    receiver,
+                    filter,
+                    PERMISSION_HCE_BROADCAST,
+                    null,
+                    RECEIVER_EXPORTED
+            );
         }
-
-        String prefsName = getReactApplicationContext().getPackageName() + ".nativehcemodule";
-        getReactApplicationContext()
-                .getSharedPreferences(prefsName, Context.MODE_PRIVATE)
-                .edit()
-                .putString("encKey", encKey)
-                .commit();
-
-        IntentFilter filter = new IntentFilter();
-        filter.addAction(ACTION_RECEIVE_C_APDU);
-        filter.addAction(ACTION_READER_DETECT);
-        filter.addAction(ACTION_READER_LOST);
-
-        /*
-         * FIXME It seems like those intents are not going through across this module and HostApduService.
-         * This happens even though those things are within the same application and package.
-         * It also seems like there is no way to bind HostApduService (or it's a skill issue).
-         *
-         * For now we will just encrypt&authenticate all messages using AES/GCM and use exported
-         * receivers. This is not a perfect solution but it is going to be secure and sufficient for now.
-         *
-         * If somebody knows a better way then any pull requests would be greatly appreciated.
-         */
-        getReactApplicationContext().getApplicationContext().registerReceiver(receiver, filter, RECEIVER_EXPORTED);
     }
 
     @Override
     public void invalidate() {
-        getReactApplicationContext().getApplicationContext().unregisterReceiver(receiver);
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
+            getReactApplicationContext().getApplicationContext().unregisterReceiver(receiver);
+        }
     }
 
     @Override
@@ -136,9 +125,13 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public boolean isPlatformSupported() {
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.TIRAMISU) {
+            return false;
+        }
+
         PackageManager pm = getReactApplicationContext().getPackageManager();
         return pm.hasSystemFeature(PackageManager.FEATURE_NFC)
-            && pm.hasSystemFeature(PackageManager.FEATURE_NFC_HOST_CARD_EMULATION);
+                && pm.hasSystemFeature(PackageManager.FEATURE_NFC_HOST_CARD_EMULATION);
     }
 
     @Override
@@ -154,6 +147,11 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public void beginSession(Promise promise) {
+        if (!isPlatformSupported()) {
+            promise.reject("err_platform_unsupported", "Unsupported Android version or missing NFC/HCE feature.");
+            return;
+        }
+
         if (!this.sessionRunning) {
             this.sessionRunning = true;
             sendEvent("sessionStarted", "");
@@ -183,6 +181,11 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public void startHCE(Promise promise) {
+        if (!this.sessionRunning) {
+            promise.reject("err_no_session", "No session is active.");
+            return;
+        }
+
         if (this.hceRunning) {
             promise.reject("err_start_emulation", "Error trying to start emulation. Emulation already started.");
             return;
@@ -194,6 +197,11 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public void stopHCE(String status, Promise promise) {
+        if (!this.sessionRunning) {
+            promise.reject("err_no_session", "No session is active.");
+            return;
+        }
+
         if (this.hceRunning) {
             this.hceRunning = false;
 
@@ -207,22 +215,27 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
         promise.resolve(null);
     }
 
+    @RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
     @Override
     public void respondAPDU(String rapdu, Promise promise) {
-        String encRapdu = AESGCMUtil.encryptData(encSecretKey, rapdu);
+        if (!this.sessionRunning) {
+            promise.reject("err_no_session", "No session is active.");
+            return;
+        } else if (!this.hceRunning) {
+            promise.reject("err_no_hce", "HCE is not running.");
+            return;
+        }
 
         Intent intent = new Intent(ACTION_SEND_R_APDU);
         intent.setPackage(getReactApplicationContext().getPackageName());
-        intent.putExtra("auth", AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        intent.putExtra("rapdu", encRapdu);
-        getReactApplicationContext().getApplicationContext().sendBroadcast(intent);
+        intent.putExtra("rapdu", rapdu);
+        getReactApplicationContext().getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
 
         promise.resolve(null);
     }
 
     @Override
     public void isHCERunning(Promise promise) {
-        // unsupported on Android, always true
-        promise.resolve(true);
+        promise.resolve(this.hceRunning);
     }
 }

package/android/src/main/java/com/itsecrnd/rtnhceandroid/RTNHCEAndroidPackage.java

@@ -1,9 +1,6 @@
 package com.itsecrnd.rtnhceandroid;
 
-import android.os.Build;
-
 import androidx.annotation.Nullable;
-import androidx.annotation.RequiresApi;
 
 import com.facebook.react.TurboReactPackage;
 import com.facebook.react.bridge.NativeModule;
@@ -14,7 +11,6 @@ import com.facebook.react.module.model.ReactModuleInfoProvider;
 import java.util.HashMap;
 import java.util.Map;
 
-@RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
 public class RTNHCEAndroidPackage extends TurboReactPackage {
     @Nullable
     @Override

package/android/src/main/java/com/itsecrnd/rtnhceandroid/{HCEService.java → service/HCEService.java}

@@ -1,12 +1,12 @@
-package com.itsecrnd.rtnhceandroid;
+package com.itsecrnd.rtnhceandroid.service;
 
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_DETECT;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_LOST;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_RECEIVE_C_APDU;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_SEND_R_APDU;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.KEY_AUTH;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.KEY_CAPDU;
 import static com.itsecrnd.rtnhceandroid.IntentKeys.KEY_RAPDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.PERMISSION_HCE_BROADCAST;
 
 import android.content.BroadcastReceiver;
 import android.content.Context;
@@ -19,31 +19,31 @@ import android.util.Log;
 
 import androidx.annotation.RequiresApi;
 
-import java.util.Locale;
+import com.itsecrnd.rtnhceandroid.util.BinaryUtils;
 
-import javax.crypto.SecretKey;
-import javax.crypto.spec.SecretKeySpec;
+import java.util.Locale;
 
 @RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
 public class HCEService extends HostApduService {
     private static final String TAG = "HCEService";
 
-    private SecretKey encSecretKey;
-
     private final BroadcastReceiver receiver = new BroadcastReceiver() {
         @Override
         public void onReceive(Context context, Intent intent) {
             try {
                 String action = intent.getAction();
 
-                if (action != null) {
-                    AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra(KEY_AUTH));
+                if (action != null && action.equals(ACTION_SEND_R_APDU)) {
+                    String rapdu = intent.getStringExtra(KEY_RAPDU);
 
-                    if (action.equals(ACTION_SEND_R_APDU)) {
-                        String rapdu = AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra(KEY_RAPDU));
-                        byte[] dec = BinaryUtils.HexStringToByteArray(rapdu.toUpperCase(Locale.ROOT));
-                        sendResponseApdu(dec);
+                    if (rapdu == null) {
+                        throw new RuntimeException("Bug! ACTION_SEND_RAPDU intent KEY_RAPDU is null.");
                     }
+
+                    byte[] dec = BinaryUtils.HexStringToByteArray(rapdu.toUpperCase(Locale.ROOT));
+                    sendResponseApdu(dec);
+                } else {
+                    Log.w(TAG, "Received unknown action: " + action);
                 }
             } catch (Exception e) {
                 Log.e(TAG, "Failed to handle broadcast in HCEService.", e);
@@ -53,13 +53,12 @@ public class HCEService extends HostApduService {
 
     @Override
     public byte[] processCommandApdu(byte[] command, Bundle extras) {
-        String capdu = AESGCMUtil.encryptData(encSecretKey, BinaryUtils.ByteArrayToHexString(command));
+        String capdu = BinaryUtils.ByteArrayToHexString(command).toUpperCase(Locale.ROOT);
 
         Intent intent = new Intent(ACTION_RECEIVE_C_APDU);
         intent.setPackage(getApplicationContext().getPackageName());
-        intent.putExtra(KEY_AUTH, AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
         intent.putExtra(KEY_CAPDU, capdu);
-        getApplicationContext().sendBroadcast(intent);
+        getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
 
         return null;
     }
@@ -68,29 +67,14 @@ public class HCEService extends HostApduService {
     public void onCreate() {
         Log.d(TAG, "HCEService onCreate");
 
-        String prefsName = getApplicationContext().getPackageName() + ".nativehcemodule";
-        String encKey = getApplicationContext()
-                .getSharedPreferences(prefsName, Context.MODE_PRIVATE)
-                .getString("encKey", "");
-
-        if (encKey.isEmpty()) {
-            throw new RuntimeException("Failed to load encKey.");
-        }
-
-        byte[] bArr = BinaryUtils.HexStringToByteArray(encKey);
-        encSecretKey = new SecretKeySpec(bArr, 0, bArr.length, "AES");
-
-        /*
-         * See a comment about registerReceiver() in RTNHCEAndroidModule.
-         */
         IntentFilter filter = new IntentFilter();
         filter.addAction(ACTION_SEND_R_APDU);
-        getApplicationContext().registerReceiver(receiver, filter, RECEIVER_EXPORTED);
+        getApplicationContext().registerReceiver(
+                receiver, filter, PERMISSION_HCE_BROADCAST, null, RECEIVER_EXPORTED);
 
         Intent intent = new Intent(ACTION_READER_DETECT);
         intent.setPackage(getApplicationContext().getPackageName());
-        intent.putExtra(KEY_AUTH, AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        getApplicationContext().sendBroadcast(intent);
+        getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
     }
 
     @Override
@@ -101,7 +85,6 @@ public class HCEService extends HostApduService {
 
         Intent intent = new Intent(ACTION_READER_LOST);
         intent.setPackage(getApplicationContext().getPackageName());
-        intent.putExtra(KEY_AUTH, AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        getApplicationContext().sendBroadcast(intent);
+        getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
     }
 }

package/android/src/main/java/com/itsecrnd/rtnhceandroid/{BinaryUtils.java → util/BinaryUtils.java}

@@ -20,7 +20,7 @@
  *
  */
 
-package com.itsecrnd.rtnhceandroid;
+package com.itsecrnd.rtnhceandroid.util;
 
 public class BinaryUtils {
     /**

package/ios/RTNHCEModuleIOSImpl.swift

@@ -13,13 +13,8 @@ extension StringProtocol {
 }
 
 extension Data {
-  struct HexEncodingOptions: OptionSet {
-    let rawValue: Int
-    static let upperCase = HexEncodingOptions(rawValue: 1 << 0)
-  }
-
-  func hexEncodedString(options: HexEncodingOptions = []) -> String {
-    let format = options.contains(.upperCase) ? "%02hhX" : "%02hhx"
+  func hexEncodedString() -> String {
+    let format = "%02hhX"
     return map { String(format: format, $0) }.joined()
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@icedevml/react-native-host-card-emulation",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Host Card Emulation (HCE) React Native Turbo Module for iOS and Android platforms.",
   "react-native": "js/index",
   "source": "js/index",

package/android/src/main/java/com/itsecrnd/rtnhceandroid/AESGCMUtil.java

@@ -1,89 +0,0 @@
-package com.itsecrnd.rtnhceandroid;
-
-import android.annotation.SuppressLint;
-
-import java.nio.charset.StandardCharsets;
-import java.security.InvalidAlgorithmParameterException;
-import java.security.InvalidKeyException;
-import java.security.NoSuchAlgorithmException;
-import java.security.SecureRandom;
-import java.util.Base64;
-
-import javax.crypto.BadPaddingException;
-import javax.crypto.Cipher;
-import javax.crypto.IllegalBlockSizeException;
-import javax.crypto.KeyGenerator;
-import javax.crypto.NoSuchPaddingException;
-import javax.crypto.SecretKey;
-import javax.crypto.spec.GCMParameterSpec;
-
-@SuppressLint("NewApi")
-public class AESGCMUtil {
-    public static String randomString() {
-        byte[] rnd = new byte[32];
-        new SecureRandom().nextBytes(rnd);
-        return BinaryUtils.ByteArrayToHexString(rnd);
-    }
-
-    public static SecretKey generateKey() {
-        KeyGenerator keyGen;
-        try {
-            keyGen = KeyGenerator.getInstance("AES");
-        } catch (NoSuchAlgorithmException e) {
-            throw new RuntimeException("Failed to get AES algorithm.", e);
-        }
-        keyGen.init(256);
-        return keyGen.generateKey();
-    }
-
-    public static String encryptData(SecretKey key, String plaintext) {
-        try {
-            byte[] iv = new byte[32];
-            new SecureRandom().nextBytes(iv);
-
-            Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
-            GCMParameterSpec gcmParameterSpec = new GCMParameterSpec(128, iv);
-            cipher.init(Cipher.ENCRYPT_MODE, key, gcmParameterSpec);
-
-            byte[] plaintextBytes = plaintext.getBytes(StandardCharsets.UTF_8);
-            byte[] ciphertextBytes = cipher.doFinal(plaintextBytes);
-
-            return Base64.getEncoder().encodeToString(iv) + ';' +
-                    Base64.getEncoder().encodeToString(ciphertextBytes);
-        } catch (NoSuchPaddingException
-                 | NoSuchAlgorithmException
-                 | IllegalBlockSizeException
-                 | InvalidAlgorithmParameterException
-                 | BadPaddingException
-                 | InvalidKeyException e) {
-            throw new RuntimeException("Crypto error.", e);
-        }
-    }
-
-    public static String decryptData(SecretKey key, String ciphertext) {
-        try {
-            Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
-            String[] parts = ciphertext.split(";");
-
-            if (parts.length != 2) {
-                throw new IllegalArgumentException("Invalid ciphertext parameter.");
-            }
-
-            byte[] iv = Base64.getDecoder().decode(parts[0]);
-            byte[] ciphertextBytes = Base64.getDecoder().decode(parts[1]);
-
-            GCMParameterSpec gcmParameterSpec = new GCMParameterSpec(128, iv);
-            cipher.init(Cipher.DECRYPT_MODE, key, gcmParameterSpec);
-
-            byte[] plaintextBytes = cipher.doFinal(ciphertextBytes);
-            return new String(plaintextBytes, StandardCharsets.UTF_8);
-        } catch (NoSuchPaddingException
-                 | IllegalBlockSizeException
-                 | InvalidAlgorithmParameterException
-                 | BadPaddingException
-                 | InvalidKeyException
-                 | NoSuchAlgorithmException e) {
-            throw new RuntimeException("Crypto error.", e);
-        }
-    }
-}