Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Why is ECB mode used on the keys? #2

Open
bradley-curran opened this issue May 6, 2014 · 1 comment
Open

Why is ECB mode used on the keys? #2

bradley-curran opened this issue May 6, 2014 · 1 comment

Comments

@bradley-curran
Copy link

I don't understand why ECB is used for the keys but CBC for the values.

@behelit
Copy link

behelit commented Jun 14, 2016

Android Studio actually complains about using ECB now and recommends removing it.
I think it may have been there originally to offer some differentiation in encoding methods for keys and values? or possibly even a typo. In any case it shouldn't be used

ECB encryption mode should not be used (was "AES/ECB/PKCS5Padding") less... (Ctrl+F1)
Cipher#getInstance should not be called with ECB as the cipher mode or without setting the cipher mode because the default mode on android is ECB, which is insecure.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants