The official REA Aegis showcase follows a six-digit login-code calculation through an Android APK and rebuilds a small clock-controlled example. It is a useful model for moving from a feature question to methods, constants and a reference test. The stated validation belongs to the showcase authors; AI Craft Pad has not rerun the APK analysis or demo.
Investigation pattern
Start from the visible code-changing behavior, locate related methods, then connect time windows and the account key to the output. Check the reconstructed rule against public reference vectors rather than relying only on readable pseudocode.
Evidence boundary
The REA project publishes the case and its source page. It describes one Aegis version and one feature, not a general reconstruction of the application or its secret data.
Requirements & evidence
- Resource type
- Case
- Category
- Unknown
- Host platforms
- Unknown
- Targets
- Unknown
- Level
- Unknown
- Original author
- REA project
- Target
- Aegis Authenticator 3.4.3
- Target platform
- Android APK
- Goal
- Trace a six-digit time-code calculation
- Tools
- REA, JADX
- REA used
- Yes
- Source-reported outcome
- Official REA case reports a test against RFC 6238 cases
- Evidence level
- Official case narrative, not independently reproduced
- Source checked
- 2026-11-03T10:48:34.177898+00:00
Official case narrative, not independently reproduced
Primary sources
Source descriptions establish documented scope. They do not establish that every workflow has been reproduced by AI Craft Pad.