Android KeyStore Initialization

Question

First off I am new to android Programming, though I am not new to programming itself. What I am, essentially, trying to do is to save my encryption Keys into the Android Keystore. There seems to be a phenomenal lack of such information on GOOGLE, itself. Since there is not much how-to available on the topic I am assuming that it isn't fairly standard knowledge. So can someone please give me a sample code to

Initialize the KeyStore(Will be using AES-256).
Save multiple keys in a KeyStore(Please tell me the max number of keys I can store in 1 KeyStore, since i plan on saving nothing short of a 100).
Get Keys from KeyStore.
Edit Keys
Delete Keys
Delete Entire KeyStore

So in essence a code for all basic functions of a keystore. Thank you in advance for your assistance.

Take a look at this.

Hemanth
– Hemanth

2015-03-02 08:52:35 +00:00
Commented Mar 2, 2015 at 8:52 — Hemanth
– Hemanth, Commented Mar 2, 2015 at 8:52

domen · Accepted Answer · 2021-01-13 17:12:32Z

6

If you set your minSdkVersion to 23 or higher Android M makes it easy to generate and manage symmetric keys as of this month.

Check out the 4th example listed here. https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.html

 KeyGenerator keyGenerator = KeyGenerator.getInstance(
         KeyProperties.KEY_ALGORITHM_AES, "AndroidKeyStore");
 keyGenerator.init(
         new KeyGenParameterSpec.Builder("key2",
                 KeyProperties.PURPOSE_ENCRYPT | KeyProperties.PURPOSE_DECRYPT)
                 .setBlockModes(KeyProperties.BLOCK_MODE_GCM)
                 .setEncryptionPaddings(KeyProperties.ENCRYPTION_PADDING_NONE)
                 .build());
 SecretKey key = keyGenerator.generateKey();

 Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
 cipher.init(Cipher.ENCRYPT_MODE, key);
 ...

 // The key can also be obtained from the Android Keystore any time as follows:
 KeyStore keyStore = KeyStore.getInstance("AndroidKeyStore");
 keyStore.load(null);
 key = (SecretKey) keyStore.getKey("key2", null);

This example also was helpful. https://github.com/googlesamples/android-ConfirmCredential/blob/master/Application/src/main/java/com/example/android/confirmcredential/MainActivity.java

edited Jan 13, 2021 at 17:12

domen

1,91712 silver badges20 bronze badges

answered Aug 24, 2015 at 19:19

nburn42

7377 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Diti Over a year ago

And what if you want to support both older (i.e. API 18) and newer (API 23+) devices using the same solution ?

nburn42 Over a year ago

I have not touched this in a long time, but as far as I remember there was no good solution.

siulkilulki Over a year ago

it should be keyGenerator.init instead of keyGenerator.initialize. There is no such method for KeyGenerator as initialize(). initialize() method is in KeyPairGenerator

Community · Accepted Answer · 2017-05-23 12:09:29Z

0

I think Android Key Store does not support symmetric keys like AES keys. Please refer to here. BTW, why does the app need so many symmetric keys? I suggest that you store one master asymmetric key in key store, and use this key to encrypt many other symmetric keys in your app. Hope you solve your problem soon.

edited May 23, 2017 at 12:09

CommunityBot

11 silver badge

answered Jun 26, 2015 at 8:02

candy

3102 silver badges5 bronze badges

1 Comment

Adil Hussain Over a year ago

Symmetric key generation and storage in the Android KeyStore is supported as of Marshmallow (Android 6 / API Level 23). See here for more info.

Collectives™ on Stack Overflow

Android KeyStore Initialization

2 Answers 2

3 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related