include::../description.adoc[]

== Sensitive Code Example

A ``++CryptoObject++``is not used  during authentication: 

[source,kotlin]
----
// ...
val biometricPrompt: BiometricPrompt = BiometricPrompt(activity, executor, callback)
// ...
biometricPrompt.authenticate(promptInfo) // Noncompliant
----

== Compliant Solution

A ``++CryptoObject++`` is used  during authentication: 

[source,kotlin]
----
// ...
val biometricPrompt: BiometricPrompt = BiometricPrompt(activity, executor, callback)
// ...
biometricPrompt.authenticate(promptInfo, BiometricPrompt.CryptoObject(cipher)) // Compliant

----

include::../see.adoc[]