I got an update: Everything works as expected! In my previous implementation biometry-restricted keychain writing and key pair generation used different instances of LAContext. In order to fix this behavior I simply had to re-generate my key pair.