java - Securely Storing Keys in Android Keystore -


i making android application communicates server. i'm using token based authentication on server, , pass information client server, using asymmetric encryption.

this how process goes

  1. generated public , private key exists before hand
  2. public key used encrypt information, , passed server client
  3. app uses private key decrypt information

however, not know how securely store private key in keystore. if store during runtime, key out in code, , if send private key during rest connection, there's no point of having encryption because hacker can find both keys. can me on creating best possible solution? thx in advance!


Comments

Popular posts from this blog

c# - Binding a comma separated list to a List<int> in asp.net web api -

Delphi 7 and decode UTF-8 base64 -

html - Is there any way to exclude a single element from the style? (Bootstrap) -