Store AES key in Android

Question

i want to store AES key in AndroidKeyStore on pre-M device

i tried to use key generated with KeyGenerator

KeyGenerator keyGen = KeyGenerator.getInstance(KeyProperties.KEY_ALGORITHM_AES);
keyGen.init(256);
SecretKey secretKey = keyGen.generateKey();

but i cannot access to that key from KeyStore, later i tried to use KeyPairGenerator

KeyPairGenerator kpg = KeyPairGenerator.getInstance(
                KeyProperties.KEY_ALGORITHM_AES, "AndroidKeyStore");
kpg.initialize(new KeyPairGeneratorSpec.Builder(this)
                .setAlias("alias")
                .build());
KeyPair kp = kpg.genKeyPair();

but

java.security.NoSuchAlgorithmException: KeyPairGenerator AES implementation not found

Hi.. I found some tutorial about how works with AES compatible with pre-M: proandroiddev.com/… — Erlang Parasu
– Erlang Parasu, Commented Jun 29, 2020 at 8:01

Alex Klyubin · Accepted Answer · 2016-05-19 15:47:20Z

8

Android Keystore supports AES only since API Level 23 (see https://developer.android.com/training/articles/keystore.html#SupportedAlgorithms). On older platforms, you could wrap the AES key using an Android Keystore RSA key. However, this means the AES key's key material will be available inside your app's process, which removes many of the security benefits of using Android Keystore.

answered May 19, 2016 at 15:47

Alex Klyubin

5,7522 gold badges31 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Store AES key in Android

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related