security - Hiding Strings Securely on Android Device -


problem: need store secret key (string) locally on device. how reasonably this?

it impossible keep 100% securely private stored locally want make difficult possible extract secret key. options?

requirements

  • there should no ui operations involved.
  • the secret key should not extractable in trivial way.

possible solutions

you can put layer of encryption on sharedpreferences , store secret key(s) there itself.

i used these references in 1 of apps , should helpful in case too.

first link: http://right-handed-monkey.blogspot.com/2014/04/obscured-shared-preferences-for-android.html

second link: what appropriate way store user settings in android application


Comments

Post a Comment

Popular posts from this blog

php - Extract Text from HTTP referer -

i using following code show referer link page on website. how can modify code shows part of link. i.e if website url www.example.com/?s=printing want extract printing. , should happen if format www.example.com/?s=aaa , not if format else www.example.com/printing. code: <?php session_start(); if ( !isset( $_session["origurl"] ) ) $_session["origurl"] = $_server["http_referer"]; echo $_session["origurl"] ?> i figured out , following code works: <?php session_start(); if ( !isset( $_session["origurl"] ) ) $_session["origurl"] = $_server["http_referer"]; $mysearchterm = $_server["http_referer"]; $whatiwant = substr($mysearchterm, strpos($mysearchterm, "=") +1); echo $whatiwant; ?>
Read more

Receive udp packets in android gstreamer -

i using eclipse juno in windows 7. doing programming on android 4.2 platform. want receive udp packets in gstreamer application. giving uri udp://127.0.0.1:1234 , sending file vlc player same computer. emulator giving message could not get/set setting from/on resource while in case of rtp, giving message no uri implementer found rtp ideas how receive streaming media in android?
Read more

authentication - ASP.NET Core 1.0. Bearer Token, cannot access custom claims -

i'm trying setup bearer authentication spa using asp.net core 1.0. i've got working jwttoken openidconnect server have issue custom claims not returned token. my startup.cs logic authentication following: private void configureauthentication(iapplicationbuilder app) { app.usejwtbearerauthentication(options => { options.automaticauthenticate = true; options.authority = "http://localhost:53844"; options.audience = "http://localhost:53844"; options.requirehttpsmetadata = false; }); app.useopenidconnectserver(options => { options.tokenendpointpath = "/api/v1/token"; options.allowinsecurehttp = true; options.authorizationendpointpath = pathstring.empty; options.provider = new openidconnectserverprovider { onvalidateclientauthentication = context => { context.skipped(); return task.fromresul...
Read more