Thank you Nikolay!
I am trying to protect an apk form being copyed to other devices.
It is not at the Android Market, because it's for a specific customer only.
So, is it any way to secure it, without keeping the Key on the device?

The idea is to read de IMEI on the device the the first time (when the user
buys the apk from our store), encrypt it and store it at the data base on
the device.

Thank you again!!
Gabriel


2011/9/1 Nikolay Elenkov <[email protected]>

> On Fri, Sep 2, 2011 at 7:19 AM, Drezden <[email protected]> wrote:
> > You need to look into what's called symmetrical encryption.
> >
> > Depending on just how secure you need this to be, you could use
> > something as simple as Base64 encoding and decoding or something more
> > robust like PGP.
> >
>
> Well, Base64 is not encryption, and PGP is a lot of things, but not a
> symmetric encryption algorithm.
>
> @Gabriel,
>
> You might want to provide more details. Why do you need to encrypt it?
> Who are you trying to protect the data from? Be aware that if you
> encrypt it on the device you will have to store the key on the device too.
> So anyone that has access to the device will be able to decrypt and
> see your data. If that is OK, you can use a symmetric algorithm like
> AES to encrypt the data and store it as Base64 encoded string or
> a blob in your DB.
>
> If you are just trying to protect it in transit while sending to your
> server,
> you should use SSL. That will both authenticate your server, so you
> know you are sending the data to the right place, take care of generating
> the necessary keys an encrypt/decrypt the data.
>
> --
> You received this message because you are subscribed to the Google
> Groups "Android Developers" group.
> To post to this group, send email to [email protected]
> To unsubscribe from this group, send email to
> [email protected]
> For more options, visit this group at
> http://groups.google.com/group/android-developers?hl=en
>

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to