Yeah, what I'm trying to do is to securely store the key bits I use to encrypt everything else in the app (and the initialization vector). This has a bit of a chicken and egg quality to it; if I encrypt the key bits, then I have to have the key I used to encrypt them somewhere, etc.
On Jan 28, 2:45 am, TomTasche <[email protected]> wrote: > If you don't trust Dianne (although I recommend you to do so) you > could set the needed permissions for that file yourself (if you have > root access). > > If you don't have root access you might want to use a database (apps > can't access another's app database) or encrypt your files using a > magical encryption mechanism. I think there are tons of solutions for > something like that out there. > > One more thing: If the data you want to protect is REALLY important, > the only secure solution would be an encrypted file. Any app with root > access could read your file if you use one of the other techniques > mentioned. > > Have a nice day > Tom > > On 28 Jan., 02:37, paladin <[email protected]> wrote: > > > > > No, another app can go to that directory and read anything in there, > > if it hasn't been deleted. I need something like Unix permissions, > > where only the app has permissions to read a certain file. Or which is > > encrypted in a way only the app can decrypt, without hardcoding a key > > in the code. > > > On Jan 27, 5:57 pm, TomTasche <[email protected]> wrote: > > > > What about Context.getCacheDir()? Maybe that's what you are looking > > > for... > > > > Good luck > > > Tom > > > > On Jan 27, 11:12 pm, paladin <[email protected]> wrote: > > > > > Is there some way to be able to save something to the file system that > > > > is only retrievable by the app that saved it? And I don't mean by > > > > hardcoding a password or key within the code, because that is very > > > > easily decompiled. Can I use the keystore that the app was signed with > > > > somehow? -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
