Talk presented at **Qualcomm Product Security Summit (QPSS) 2026**.

The talk revisits a neglected attack surface in Android’s biometric authentication flow and explores how weaknesses around biometric AuthToken handling can be abused to crack PINs and bypass Credential Encrypted (CE) protection.