Android Keystore Encryption Scheme Broken, Researchers Say
https://threatpost.com/android-keystore-encryption-scheme-broken-researchers-say/119092/
The default implementation for KeyStore, the system in Android
designed to store user credentials and cryptographic keys, is
broken, researchers say. In a an academic paper published this
week, researchers argue that the particular encryption scheme
that KeyStore uses fails to protect the integrity of keys and
could be exploited to allow an attacker to modify stored keys
through a forgery attack.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
