scottyab / aescrypt-android Goto Github PK

Simple API to perform AES encryption on Android. This is the Android counterpart to the AESCrypt library Ruby and Obj-C (with the same weak security defaults :( ) created by Gurpartap Singh. https://github.com/Gurpartap/aescrypt

License: Apache License 2.0

Java 100.00%

aes-encryption android java

aescrypt-android's Introduction

Hi there 👋

🧑‍💻 I'm a Senior Android Engineer and offer the following consultancy services:
- Android App design, build and test services
- Android SDK specific consultancy, how to design, build, distribute open or closed source SDKs in the Android ecosystem
- App security and hardening techniques
- Gradle: preformence optimisation, test automation, CI and CD to Google Play or maven central
- Code Review: improving team processes, architectural and/or security review
- Android technical interviews - Do you have a need for Android technical resource and desire unbiased technical review of potential candidates?
🔭 My most recent poisition was working with Help Scout building an Android app and SDK
- Day to day using MVI/Clean architectrue utilising Kotlin and Coroutines Flow, Room, Bitrise
- Most proud of the real-time Chat SDK which I built from ground up using Push notifications, WebSockets with UI using MotionLayout
🌍 I blog at scottyab.com about Android, software engineering and various other interests.
🗣 I enjoy speaking at conferences and have presented internationally about Android and app security. See speaker timeline for more details
🎉 Google officially recognised my Android community contributions in 2016 by inviting me to the Google Developer Experts (GDE) programme where I was an active member until 2022.
👀 Looking for: speakers to give tech talks at the SW Mobile meetup.com group that I founded in 2012 and co-run. Submit talk here
📚 Co-Author of the Android Security Cookbook 2013, ISBN:978-1-78216-716-7
💬 Ask me about Android development, Mobile security, Trail running or Coffee!
📫 How to reach me: via Linkedin or Twitter
😄 Pronouns: Him/He
⚡ Fun facts:
- 🌯🌮 Favourite food is anything Mexican, but especially burritos
- 🍻☕️ Enjoy craft beer and freshly ground good coffee
- 🏃‍♂️🏔 Love long disance trail running espeically in the mountains

aescrypt-android's People

Contributors

Stargazers

Watchers

Forkers

hanhailong cupatil juliahudley thespindoctor123 androiddream sumitsharmadesi msoftware javiersan18 mehrrizwan selson timonchev vercent zlux anothem kamalkk sigh0829 chonamdoo danielgindi abc1225 vabym8 tbadgu fatahzull grp0916 paakjis goo-dev rkodekar japdlsd nthuat adi3246 deyin lesthersk doridori vaibhavvishal lulicheng ankitkrsahu94 m-yeganehh andreibalmos milansamardzic wangpeng1 smallsilver maythu7 chenli106 hakaseshounen androidroadies mattolu tata8k dangvu9007 carlosguiabolso naveenycc wwwdotphilip tdtran hsukeiheng mrzero2000 ae94 gitgzw ahmedalhadi jahsonkim nagaraj-nk antarix sachinshelke loulousky codetestmg lkarthik76 zuoshengyong tusharnigam binzhiyuan hvlong fcunhagrowandfit tobimichigan maniacs-m gorio babel-cdm semtle allangisoni swfan liutongzhu benzfish bluemap iamrajendra ajrulez lxknvlk thangdaoduc android-bd kadaluarsa yardclub quantum-fusion edomuhammad balrampandey19 alex31n tomatolee cybernhl dreamlivemeng magic-coder thearaoeun yahyrparedes ahmadarslan13 wnchen hl46000 kanikag7 whalemare

aescrypt-android's Issues

is this library nice for saving user instagram token?

can i save my users access token into shared preferences with this lib? my mean is is it safe?
thanks in advance

javax.crypto.BadPaddingException: error:1e000065:Cipher functions:OPENSSL_internal:BAD_DECRYPT

Encryption result of AESCrypt-Android library differs from result in php?

According to the usage example, using password = password and message = hello world results in the encrypted message 2B22cS3UC5s35WBihLBo8w==

However in php using the same password and message following the snippet here results in the encrypted message lMwL6ztvVavgsTu7NJE/kw== which is different.

See complete php code snippet here

<!DOCTYPE html>
<head>
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
</head>

<body>
 <!-- following this snippet<br>
      https://www.urbaninsight.com/2012/06/13/encrypt-and-decrypt-strings-php
 -->

 <?php
  $string = "hello world";
  $password = "password";
  $method = "aes-256-cbc";

  $encrypted = openssl_encrypt($string, $method, $password);
  echo "ENCRYPT:<br>$string<br>$password<br>$encrypted<br><br>";

  $decrypted = openssl_decrypt($encrypted, $method, $password);
  echo "DECRYPT:<br>$encrypted<br>$password<br>$decrypted";
 ?>

 <!-- result: lMwL6ztvVavgsTu7NJE/kw==
  -->

 </body>
</html>

Is the AESCrypt-Android library not compatible with php or is there something, I'm overseeing currently?
Thank you in advance!
Taifun

Java/Groovy Port

Hi,
I have created a direct port of your Android File to suit Java/Grails enviornments. Works perfect with your Android Library. The Gist is at
https://gist.github.com/vishnoor/a0e2922bda3af735a17e90ca03f7d446

Usage is same as your Android Usage.
The only extra thing is to support 256 Bit AES, the Oracle 7 Unlimited JCE has to be installed
http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

Sincere Regards,
Vishnoo

Plain Text Error

Hello, Am using the library for a messaging app am working on. Before using the library messages are sent in plain text so after adding the library the decrypt message crashes the app for those old messages. Since the wrapped in the try catch block was expecting to catch the error for plain text.
Need help please. :(

stack trace below

Fatal Exception: java.lang.IllegalArgumentException
Fatal Exception: java.lang.IllegalArgumentException: bad base-64
at android.util.Base64.decode(Base64.java:161)
at android.util.Base64.decode(Base64.java:136)
at android.util.Base64.decode(Base64.java:118)
at com.scottyab.aescrypt.AESCrypt.decrypt(AESCrypt.java:124)

failed to find error in android studio

Error:Failed to find: com.scottyab:aescrypt:0.0.1
Open File "open.dependency.in.project.structure" Open in Project Structure

please make the Library downloadable as jar !!!

not everybody use maven or gradle so please let other people download the library jar file.

Use less Library Delete this Shit

After apk decompiler it clearly show all my string (jsoneditoronline.org)
ex: this.encryptedMsg = AESCrypt.encrypt("url", "myurl");

Then why this useless library.. don't wast developer time .. just delete thus shit library

dont call this shit encrypt and decrypt

Can i use Byte array instead of String data...... can i use this lib for audio and video

key derivation: use PBKDF2, not SHA-256

the long explanation is here: link to StackExchange

TL;DR SHA-256 was not meant as key derivation function and has some bad properties (e.g. it is too fast).

How to use aes256 mode?

I use AESCrypt.encrypt("123456","123456") and I got "LK09ZUQfjEWnBhyah8VNXg=="
but the result should be "U2FsdGVkX1/bIqQCoW3eTfBoynP0mswP1PE6HM97jTk=" .
What's the problem?

Is there any way to use it in Java Platform such as Windows?

The Cipher "AES/CBC/PKCS7Padding" not support.

Only "AES/CBC/PKCS5Padding" is available

unable to run wrong final block length

Please Help me to resolve this issue :
{"Req Response":"unable to run wrong final block length","Response code":"003"}

IV must be 16 bytes long

Hello,

Im getting (IV must be 16bytes long) when using the advance mode.

My encryptedText = "HE9257Ykdrnb7zZTbNYLcLNzsg24t2aEftUZ7Tr0BU0="
My IV = "618wNQX6K3k2343c" //My IV is 16byte long

I base 64 decode both using Base64.decode(encryptedText, Base64.NO_WRAP)
and Base64.decode(IV, Base64.NO_WRAP)
then pass in (SecretKeySpec, byte[] IV, byte[] encryptedText ) as parameter for advance mode,
but gave me an error (IV must be 16 bytes long).

can you write code exaple for Advanced usage

can you write code example for Advanced usage

Crashing if invalid BASE64 String Given

java.lang.IllegalArgumentException: bad base-64

in this line :
byte[] decodedCipherText = Base64.decode(base64EncodedCipherText, Base64.NO_WRAP);

This occurs when base64EncodedCipherText is not a proper BASE64 value .
Write something to check for a proper BASE64 and then pass it to the function.

PHP Equivalent

I would like to know if there is a php equivalent of this library for decrypting a string encrypted in android. Thanks

how to encrypt a file ？

Not equal

http://blog.dealforest.net/2012/03/ios-android-per-aes-crypt-connection/

Base64.encodeToString(cipher.doFinal(stringTocrypt.getBytes()), Base64.DEFAULT); //correct

Encryption result is different on Android and IOS

Hello,

I am using this library in my android project and its counter part https://github.com/Gurpartap/aescrypt in ios project. I am encrypting same text with same encryption key, but it is giving me different results on ios and android.

I am using this key : 25c35734b1ef623ca2a7f730cf2fea8b790739ba

String to encrypt is : Password

Encrypted String IOS : W3LyAxKq2+QdDBfKUGVgTg==
Encrypted String Android : zdgSimKva1jblici7F8DGw==

Python Counterpart

I have written the completely compatible python counterpart of AESCrypt (https://github.com/ninjatrench/PyAESCrypt)

Maybe it would be helpful for cross platform implementation and you can add it to readme file

Thanks

NULL POINTER EXCEPTION :

Encryption and decryption is not worked on some devices. It gives null pointer instead of encrypted or decrypted string.