Security of Storing Modulus & Exponent Within C about securitysample HOT 4 CLOSED

Hi,

You do have a point.

That is actually the reason I kept these arguments in native c/c++ code. If you decompile your apk, you would get .so files, all the variables you define through NDK including the modulus and exponent are put together and a bit hard to read since they are consecutive.

However, this solution is outdated, keystore is a better option.

from securitysample.

Thanks for your reply. How would keystore help? The keystore would not know how to decode the encrypted keys unless you have a different idea?

I think the best we can do is making it more difficult like you have done with the RSA keys, but someone would always have the information they needed to decrypt the data.

from securitysample.

1. How would keystore help?
   You could store your secret keys by using keystore

2. Someone would always have the information they needed to decrypt the data
   Totally

from securitysample.

1. Still wouldn't help placing these keys in at compile time. The Keystore would help if they were returned from the server at runtime

from securitysample.