java - Securely Storing Keys in Android Keystore -
i making android application communicates server. i'm using token based authentication on server, , pass information client server, using asymmetric encryption.
this how process goes
- generated public , private key exists before hand
- public key used encrypt information, , passed server client
- app uses private key decrypt information
however, not know how securely store private key in keystore. if store during runtime, key out in code, , if send private key during rest connection, there's no point of having encryption because hacker can find both keys. can me on creating best possible solution? thx in advance!
Comments
Post a Comment