security - Hiding Strings Securely on Android Device -
problem: need store secret key (string) locally on device. how reasonably this?
it impossible keep 100% securely private stored locally want make difficult possible extract secret key. options?
requirements
- there should no ui operations involved.
- the secret key should not extractable in trivial way.
possible solutions
obfuscation
android keychain class http://developer.android.com/reference/android/security/keychain.html http://nelenkov.blogspot.com/2011/11/using-ics-keychain-api.html
i think keychain requires user interaction wouldnt work.
you can put layer of encryption on sharedpreferences , store secret key(s) there itself.
i used these references in 1 of apps , should helpful in case too.
first link: http://right-handed-monkey.blogspot.com/2014/04/obscured-shared-preferences-for-android.html
second link: what appropriate way store user settings in android application
Comments
Post a Comment