Open scottyab opened 10 years ago
Any plans to look at this any time soon? I might fork and attempt to implement this. Would be particularly interesting if it can be hardware-backed.
@hubert3 wow, it's been a year since you asked this question, apologies for the slooooow response. My time is a limiting factor at the moment, so no current plans. I would love to add this functionality, especially given min SDK 18 is getting more and more acceptable.
Worth checking this article as there are a couple of edge cases with the keystore. Android Security: The Forgetful Keystore
Addressed in https://github.com/scottyab/secure-preferences/pull/58 looking forward to include this once revamp of the library has been completed
Add the option for developers to enable additional security on API:18+ using the Androidkeystore.
Androidkeystore is for RSA (and EC since 4.4) certs so use a newly generated one to encrypt the keys used for the key and value encryption