Flawed Encryption/Security
sreejithbnaick opened this issue · 1 comments
sreejithbnaick commented
Currently library is using following method to get password for decryption, which is always constant.
private fun getPassword(): String {
val uuid = (getSign() + getUUID())
return getSHA256(uuid) ?: uuid
}
Passwords should be generated randomly for each sesssion and stored securely, like Android Keystore system: https://developer.android.com/training/articles/keystore
abbasnaqdi commented
Hi, Thanks for submitting the issue.
I will investigate this as soon as possible.