Secure your data - Deep dive into encryption and security (Android Dev Summit '19)

Strategies for data encryption on Android using Jetpack Security, key takeaways: learn to encrypt data safely on device and use the AndroidKeyStore.
1. Outline the challenges with data-at-rest encryption.
2. Best practices for data encryption and key management.
3. Deep dive into why and how Jetpack Security library was built.
Presented by: Jon Markoff, Nicole Borrelli‎
Jetpack Sessions → goo.gle/AndroidJetpack
Android Dev Summit '19 all sessions playlist → goo.gle/ADS19allsessions
Subscribe to the Android Developers channel! → goo.gle/AndroidDevs
Check out the photo album → goo.gle/ADS19Photos
#AndroidDevSummit event: Android Dev Summit 2019; re_ty: Publish; product: Android - General; fullname: Jon Markoff, Nicole Borrelli;

[@nurzhan051184]

make secure Room tables

[@sohailzahid147]

Its not working if we set minify to true? any help how resolved it.

[@silientlips]

How about using LogInjection when the app is running? Is it possible to extract the data?

[@anshsachdeva850]

so, my content is encrypted using million algos, my file system is encyrpted using million algos, but to unlock all these, the key is present as plain string in the app source code , that can be easily decompiled ? any solution for that?

[@MatthiasSchicker]

That is what Android KeyStore is for (developer.android.com/training/articles/keystore)

[@enprevencionenprimerplanoy5964]

Configuracion para Actualizacion

[@ashokganji]

Looks like output stream append not possible with EncryptedFile

[@Soulcybering]

Thank you for the info about 1.0.0 release 👍

[@abhishekchauhan-ud1mt]

Can i use androidx security library in live project, any help please

[@MobileAcademys]

it's already in RC 1.0.0-rc02 hope they can release v1.0.0 by mid of this year

[@stacyhackney6100]

Thank you

[@aniksen3831]

how did i enable full disk encryption on Android 11 ?

[@zalnars7847]

Full disk encryption is decrapted Android 11 uses file based encryption way better and faster

[@hilmanshini_jigoku]

Is it somekind of drm? Or managed drm?

[@pqsk]

drm is digital rights management. drm uses encryption. so to answer your question, no it is NOT either.

[@Johnny_Love_Tree]

Is there an encryption so people can't snoop on what your doing online.

[@pqsk]

use tor and don't login to anything

[@cularu1]

The question is, is it possible that someone can extract data encrypted with this method?

[@luciferthegod3120]

It is

[@vlastos]

Yes, but its..encrypted

[@pqsk]

if the phone is rooted they can extract it, but it is encrypted. to get the keys to decrypted would be something else. not impossible, but not easy to do

[@FoxinTaiwan]

Cellebrite...

[@rishabh8765]

Jon Markoff sounds so much like a transformer to me

[@hayk.galstyan]

Why not android 5?

[@BigFerdes]

He explains at 14:07, will come to 4.4+ later

[@hilmanshini_jigoku]

Yeah there are still people using 4.4

[@hayk.galstyan]

@@BigFerdes Yeah, I heard that after commenting.

[@agung_laksana]

Is it available now for android 5 ?

[@MahmudulHassanShovon]

Please use simple and easy speech. I think many more thing you know but you just think all knows.

[@pqsk]

cryptography is an advanced topic that can't really be explained in such a short video in addition to the point of this video. the best thing to do is to pick up a book and read up on it or look for playlists or lectures on youtube. don't expect to understand it with summaries.

[@MahmudulHassanShovon]

@@pqsk Thank you for your advice.