Comments (8)
Conceal currently uses 128 bit AES in GCM mode. For the mac it uses SHA1 HMAC. Are there any other particulars you wanted?
from conceal.
Closing out. feel free to reopen if you have further questions
from conceal.
@siyengar Can the implementation be modified to use AES 256? Please advise. Thanks!
** Question Update ** With NativeGCMCipher accept any valid AES key size (128, 192, or 256) for keys generated by the key chain? I implemented a custom key chain that generates a 256-bit key, and was able to encrypt my data, but wanted to confirmation that this is valid.
from conceal.
@jlchoike-DL currently the native code enforces a AES128 key size https://github.com/facebook/conceal/blob/master/native/crypto/gcm_util.c#L51 because it uses AES128.
I need to add a feature to allow multiple key sizes. Thanks for checking.
Is there a business reason you need AES256 vs 128. AES128 should be pretty strong for modern applications.
from conceal.
@siyengar I have the same request. My business reason is that my client requires it. I would love to be able to use conceal at least for the AES-128 and AES-256
from conceal.
@mandrachek sounds good, bumping the priority of this request
from conceal.
@siyengar I have business requirements to use AES-256 bit encryption. Thank you for responding so promptly!
However, I just learned that the inclusion of Open SSL has precluded my team from using Conceal because of the presence of BSD 4-Clause license (involving advertisement when OpenSSL code is used).
Have you considered any alternatives to OpenSSL for AES-GCM (e.g. BountyCastle)? I think this would eliminate the restriction on using Conceal.
from conceal.
@jlchoike-DL I don't want to speak for @siyengar , but that would defeat the performance enhancements this library provides.
from conceal.
Related Issues (20)
- Why not think about using the cpu feature like ANDROID_CPU_ARM64_FEATURE_AES?
- Native Crash!!! HOT 6
- [Question] Password based key derivation usage HOT 5
- native crash and app can't pickup the exception,Can this exception wrap with java exception,then i can catch it
- native crash on Samsung HOT 1
- README.md refers to deprecated crypto.getCipherOutputStream
- What do I need to know in order to encrypt elsewhere for Conceal to decrypt? HOT 3
- The speed of decrypting the file is twice faster than the speed of encrypting the same file
- How to save encrypted file to internal folder ?
- App crashed in native method
- Conflicts using in React Native project due to com.facebook.jni.DestructorThread HOT 3
- showing NoSuchMethodException on Android P when initialing the SoLoader HOT 10
- Incompatibility with the Facebook library Flipper
- Conflict with React Native in v2.0.2 HOT 6
- Subpar PBKDF2 performance
- PHP Implementation HOT 1
- signal 11 (SIGSEGV), code 1 (SEGV_MAPERR) Native Crash in Google Play Console HOT 5
- App crashes when running as 64 bit version: `libfb.so is 64-bit instead of 32-bit` HOT 1
- Fatal signal 11 (SIGSEGV), code 2 upon file decryption.
- Native crash (conceal version 2.0.2) java.lang.UnsatisfiedLinkError: couldn't find DSO to load: libfb.so HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from conceal.