Skip to content

Flawed Encryption/Security #2

@sreejithbnaick

Description

@sreejithbnaick

Currently library is using following method to get password for decryption, which is always constant.

private fun getPassword(): String {
val uuid = (getSign() + getUUID())
return getSHA256(uuid) ?: uuid
}

Passwords should be generated randomly for each sesssion and stored securely, like Android Keystore system: https://developer.android.com/training/articles/keystore

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions