Giters

scottyab / AESCrypt-Android

Simple API to perform AES encryption on Android. This is the Android counterpart to the AESCrypt library Ruby and Obj-C (with the same weak security defaults :( ) created by Gurpartap Singh. https://github.com/Gurpartap/aescrypt

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

key derivation: use PBKDF2, not SHA-256

japdlsd opened this issue · comments

commented

the long explanation is here: link to StackExchange

TL;DR SHA-256 was not meant as key derivation function and has some bad properties (e.g. it is too fast).

commented

Thanks for your comment, I agree, however the point of this library was Android version of https://github.com/Gurpartap/aescrypt

I'll update the readme within something like... For better and just as simple API check out [java-aes-crypto(https://github.com/tozny/java-aes-crypto)