Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verifying device does not synchronize master key to the verified device #29119

Closed
eras opened this issue Jan 28, 2025 · 3 comments
Closed

Verifying device does not synchronize master key to the verified device #29119

eras opened this issue Jan 28, 2025 · 3 comments
Labels
A-E2EE-Cross-Signing O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Major Severely degrades major functionality or product features, with no satisfactory workaround T-Defect

Comments

@eras
Copy link

eras commented Jan 28, 2025

Steps to reproduce

  1. I have a Element Web that shows the following information in the Cross Signing settings:

Image

  1. I pressed the "Verify this session" button

  2. I verified the session on an Element Android 1.6.28.

On the mobile phone app Security & Privacy/Cross-Signing. "Private Keys on device" and then "Master Key: ... User Key: ... Self Signed Key: ..." show that the device has access to the master key.

Outcome

What did you expect?

I expected the master key to arrive to the verified device.

What happened instead?

However, this view still shows "Master private key" "not found locally"

Image

Operating system

Windows 10, 23H2

Browser information

FireFox 134.0.2

URL for webapp

https://app.element.io/

Application version

Element Web 1.11.91, Crypto version: Rust SDK 0.8.0 (21f7cc7), Vodozemac 0.8.1

Homeserver

matrix.org

Will you send logs?

Yes

@eras eras added the T-Defect label Jan 28, 2025
@dosubot dosubot bot added A-E2EE-Cross-Signing O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Major Severely degrades major functionality or product features, with no satisfactory workaround labels Jan 28, 2025
@eras
Copy link
Author

eras commented Jan 28, 2025

Alas it was not possible to submit the logs, as submitting the logs issued the error message "Failed to send logs: IDBDatabase.transaction: 'logs' is not a known object store name".

@BillCarsonFr
Copy link
Member

BillCarsonFr commented Jan 29, 2025

On the mobile phone app Security & Privacy/Cross-Signing. "Private Keys on device" and then "Master Key: ... User Key: ... Self Signed Key: ..." show that the device has access to the master key.

On android Private Keys on device means that this device can cross-sign new devices, i.e that it has SSK and USK private part. But it might not have the private MSK

The other keys on screen are the public parts

@richvdh
Copy link
Member

richvdh commented Jan 29, 2025

Closing in favour of element-hq/element-android#8994.

Sorry @eras, looks like your private master key has gone missing, and if you don't have the recovery key, the only option is to do a reset.

@richvdh richvdh closed this as completed Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-E2EE-Cross-Signing O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Major Severely degrades major functionality or product features, with no satisfactory workaround T-Defect
Projects
None yet
Development

No branches or pull requests

3 participants