LoanerLaserApp

← horaciovaldes.com

Migration Note: Controller Secret Derivation Change (2026-02)

What changed

• Controller now sends LNR2 secret bytes already derived from the organization secret phrase.
• Laser app keeps LNR2 parser format unchanged and uses parsed 16-byte secret directly for HOTP.

Operator actions

1. Update all operator workstations to this app version.
2. On first launch after update, complete local Enter Secret Phrase setup:
   • Generate Phrase for device-local gate, or
   • Enter Existing Org Phrase.
3. If re-pairing a unit that was paired before this update, review warning:
   • Re-pairing may change generated payment codes.

Important behavior

• Successful re-pair replaces stored pairing secret with the newly parsed LNR2 secret.
• Secret phrase is saved locally in encrypted form only (not plaintext), alongside verifier metadata.
• App prompts for phrase setup on first launch, then auto-unlocks from encrypted saved phrase on later launches. If auto-unlock fails, operator is prompted for manual phrase entry.
• Wrong phrase shows a generic mismatch error.