abbasnaqdi/reactor

Flawed Encryption/Security

sreejithbnaick opened this issue · 1 comments

Currently library is using following method to get password for decryption, which is always constant.

private fun getPassword(): String {
val uuid = (getSign() + getUUID())
return getSHA256(uuid) ?: uuid
}

Passwords should be generated randomly for each sesssion and stored securely, like Android Keystore system: https://developer.android.com/training/articles/keystore

Hi, Thanks for submitting the issue.
I will investigate this as soon as possible.