scottyab / secure-preferences

Android Shared preference wrapper than encrypts the values of Shared Preferences. It's not bullet proof security but rather a quick win for incrementally making your android app more secure.
1.53k stars 235 forks source link

Security alert on our production app on google play console #104

Open ashishdimi09 opened 5 years ago

ashishdimi09 commented 5 years ago

Hi,

We are seeing a warning on our production app on google play console. The warning states:

Security alert Your app contains unsafe cryptographic encryption patterns. Please see this Google Help Center article for details. Vulnerable classes: com.xxx.xxx.android.AesCbcWithIntegrity Affects APK version 10819.

The article the warning is referring to https://support.google.com/faqs/answer/9450925

Remediation for Unsafe Cryptographic Encryption - Google HelpThis information is intended for developers with app(s) that contain unsafe cryptographic encryption patterns. That is, a ciphertext is generated with a statically computed secret key, salt, or initiasupport.google.com

Can someone help me to resolve this Security alert warning?