+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Best way to store and hide a pass inside an offine app (/showthread.php?tid=6167600)
Best way to store and hide a pass inside an offine app - amantellix - Aug 11, 2021
Hello, in your knowledge, what would be a secure way to store a password inside an android app?
Presume that this app must perform a decryption, and that has to do it offline, it means that the private key must be stored inside the app somewhere right?
How could this kind of storage possibly work, considering that the apk can be reverse engeneered to see the code?
thank you
Antony
RE: Best way to store and hide a pass inside an offine app - Frost Crypt - Aug 11, 2021
i'm no android developer but i'm pretty sure that that android let's you use the security of it's own encryption key and tie your security somehow to it, you have to research it.
Take a look at signal's source, i'm sure they use that to secure their messages .
RE: Best way to store and hide a pass inside an offine app - amantellix - Aug 11, 2021
(Aug 11, 2021 02:50 AM)Nano Shield Wrote: i'm no android developer but i'm pretty sure that that android let's you use the security of it's own encryption key and tie your security somehow to it, you have to research it.
Take a look at signal's source, i'm sure they use that to secure their messages .
Thank you for the hint, I looked quickly at signal's code but is way different to the code of this app i am trying to understand, all the libraries are different.
I will try to look deeper anyway.
Are there any andorid expert who can have any suggestion?