Hotfix for v3.3

Broken compatibility due to new development tools: fix #105

What's Changed in v3.3

Feature/settings improvement

• Force keys revoking confirmation: now all settings able to be approved by "OK" or canceled.
• New moto: "No changes before "OK" is pressed."
• Show visually when keys will be removed.

Retry in case of WINBIO_E_DATA_PROTECTION_FAILURE

• fix #93 - [NCryptDecrypt — 0x80098046]

Bugfix

• lower probability of #25 - Windows Hello Prompt Hidden
• lower probability of #86 - Windows Hello window not in focus when KeePass opened through a shortcut
• fix #92 - KeePass Error with KeePassWinHelloPlugin.plgx and after Upgrade to Windows 11 22H2-22621
• fix #97 - Debugging KeePassWinHello in Visual Studio 2022 throws exception

Stack of UI contexts

• fix #48 - Windows-Hello not opening on current screen and not locking again using AutoFill
• fix #54 - Windows Hello dialog position at top-left of the screen if main window is hidden

Full Changelog: v3.2...v3.3

What's Changed

Feature/settings improvement

• Force keys revoking confirmation: now all settings able to be approved by "OK" or canceled.
• New moto: "No changes before "OK" is pressed."
• Show visually when keys will be removed.

Retry in case of WINBIO_E_DATA_PROTECTION_FAILURE

• fix #93 - [NCryptDecrypt — 0x80098046]

Bugfix

• lower probability of #25 - Windows Hello Prompt Hidden
• lower probability of #86 - Windows Hello window not in focus when KeePass opened through a shortcut
• fix #92 - KeePass Error with KeePassWinHelloPlugin.plgx and after Upgrade to Windows 11 22H2-22621
• fix #97 - Debugging KeePassWinHello in Visual Studio 2022 throws exception

Stack of UI contexts

• fix #48 - Windows-Hello not opening on current screen and not locking again using AutoFill
• fix #54 - Windows Hello dialog position at top-left of the screen if main window is hidden

Full Changelog: v3.2...v3.3

Fixed following issues:

• #42 - Handle inner TPM error;
• #51 - Fallback to default unlock on remote desktop (Windows Hello is not available for remote sessions);
• #56 - Access denied for AllowSetForegroundWindow;
• #60 - Fallback to using local key if the persistent one is absent;
• #63 - Address NTE_INVALID_HANDLE error;
• #68 - Fix TPM issue related to hibernation;
• #69 - Address NTE_BAD_KEYSET error;
• #71 - Address NTE_BAD_DATA error;
• #72 - Handle inner NCryptEncrypt error;
• #77 - Address TPM_20_E_SIZE error;

And also simplified bugs reporting through dedicated button in error message dialog.

Fixed the security issue found by Angelelz #38.
It allowed to execute a spoofing attack by replacing the permanent key used to sign master passwords while storing in the Windows Credential Manager. Big thanks to Angelelz!

This release is dedicated to minor but still important improvements which cut corners is some scenarios of using the plugin.

• Revoking the key if Windows Hello prompt was cancelled is now optional (#30, thanks to GoldenHashtag)
• New algorithm for handling secure desktop which is compatible with AutoType and Open From URL dialogs (#18, thanks to kinglike1337)
• Fixed an error when creating a permanent key on Windows 10 earlier 1809 (#33, thanks to mullenat and tvannuland).

In this major release we have finally shipped a long-awaited feature for a permanent storage for master passwords (#7).
The storage holds its content encrypted with a permanent key signed with your biometry via Windows Hello.
Please follow to the Options dialog and create a permanent key in order to enable this storage. Thanks to gio710 and many others.
In addition, you can revoke all stored keys manually on the Options (#10, thanks to ghost).

And now here is the most significant change ever. Let us introduce our brand-new ultimate icon!🎈

Support running in elevated KeePass process (#11)

Added support for KeePass option "Enter master key on secure desktop" (#12)

This release is built on a completely new codebase that aims to improve UX, enhance code quality, stability and maintainability, essentially focusing on security issues. In particular, the release includes:

Features:

• New smooth lock-unlock workflow without a redundant "quick" key provider;
• Encoding and decoding keys from third-party providers based on the metadata instead of caching their effective keys;
• Increased security of key management (keys are encrypted by Windows Hello and AES algorithms);
• Added an option to disable the plugin in Settings dialog;

Fixes:

• Fixed the issue with keeping original key file path upon unlocking DB (#9, thanks to kinglike1337)
• Changes of validity period option is now applied to existing stored keys (related to #10, thanks to ghost)
• Fixed a possible vulnerable behavior by suggesting quick authorization in case of suspected key compromise.

• Fixed handling an exception if WinHello is disabled #1 (thanks to rjt)
• Small improvements in Options dialog