android - AndroidKeyStore wiped out after device password change -


i working on android application based on client-server architecture. data security, using public-private key pair data encryption , signing. using androidkeystore storing key pair. below code generate key pair:

keypairgeneratorspec spec = new keypairgeneratorspec.builder(         mcontext)         .setalias(mprivatekeyalias)          .setsubject(new x500principal("cn=" + mprivatekeyalias))         .setserialnumber(                 biginteger.valueof(system.currenttimemillis()))         .setstartdate(start.gettime())         .setenddate(end.gettime()).setkeysize(2048).build();  keypairgenerator kpgenerator = keypairgenerator.getinstance(         "rsa",         "androidkeystore");  kpgenerator.initialize(spec); // key pair saved in androidkeystore keypair pair = kpgenerator.generatekeypair();

after executing code, keystore releated files (cert , pkey files) generated @ '/data/misc/keystore/user_0/' directory. encrypting application sensitive data auth-token , saving shared pref security reasons.

but when user changes device password or pin, keystore files getting deleted masterkey used keystore encryption generated using device credentials.

now fix issue, tried keep public-private key pair in ram , when password gets changed. onpasswordchanged(context context, intent intent) method of deviceadminreceiver, executing below code : 

keystore keystore = keystore         .getinstance("androidkeystore"); keystore.load(null); keystore.setkeyentry(mprivatekeyalias, mprivatekey.getprivatekey(),         null, new certificate[] { mprivatekey.getcertificate() });

but, after code cert file gets created @ '/data/misc/keystore/user_0/' directory , while decryption using private key, giving invalid signature error.

also, have shared public key server, encrypted data private key, creating new key pair not better solution.

so, how can retain public private key pair after device password change ? if there no work around, exact use of androidkeystore? can use ?

this issue has been fixed google in android 5.0 (lollipop) release. but, previous versions of android, have live issue. :(


Comments

Post a Comment

Popular posts from this blog

php - Submit Form Data without Reloading page -

i know question has been asked , answered bunch of times life of me can not solution work on code. believe if redo code, work properly, , in retrospect time i've spent on issue should have redone code...but beyond deadline , have working prototype up... can advise how update multiple forms on single page without reloading page? horrible @ php , complete noob js/jquery/ajax @ best. html/php in single file , believe causing me problems/is largest obstacle @ getting ajax form processing work. basically, want users to: select teams multiple dropdowns in form group 1 (league champs) , on update update db newly selected team without reloadding page. edit team scores per match , on score submit/update, update db new scores. for each requirement there multiple forms (1 each leagues, 1 each per match) have set class on each form id. everything works via php, form submission reloads page each time submitted , not ideal. i have tried ajax code here http://scotch.io/tutoria
Read more

linux - Rails running on virtual machine in Windows -

the reason why want switch ubuntu people said gems works better on linux on windows. i don't want macbook pro rails development since love windows , cannot stand lack of apps mac. moreover, people saying ubuntu "better" mac: http://www.reddit.com/r/ubuntu/comments/1bgj1s/are_there_advantages_of_ubuntu_over_os_x_for/ does virtual box work enough doesn't have lag @ all? using i7-3517u cpu 8gb memory. need program in environment lag-free , not sluggish. or there alternatives recommend? i unsure permission settings or complicated stuffs regarding terminal. i'll using terminal develop. i'm still quite new here development in linux. please kind me >< thanks. @holyxiaoxin pretty sure should asking on superuser instead. nevertheless, suggest install ubuntu in partition instead of running virtual machine. here's guide https://help.ubuntu.com/community/windowsdualboot also, yes. developing in virtual machine accurate, @ end experiment w
Read more

php - $params->set Array between square bracket -

i'm using k2 in joomla 3.3. i'm trying set params (items ids ) module k2_content item.php file. result must between brackets, like: ["96","68"] my code is: $query = "select * #__k2_items extra_fields_search = '$myautor' , catid !=1 " ; $db->setquery($query); $losautores = $db->loadobjectlist(); $result = array(); foreach ($losautores $key => $value) { $result[] = '" '.$value->id.' "'; } $string_version = implode(',', $result); $autoresfinal = '['.$string_version.']'; if test using print, looks ok. passing var pramas, 1064 error. $params->set('items', $autoresfinal); to test tried $autoresfinal = ["96","68"]; and works fine. idea why doesn't work? thank you. if assign ["x","y"] assigning an array . here transforming array in st
Read more