I read this documentation, and I have written an algo to encrypt and decrypt a string. But I don't know how many types of algorithms android supports.
migrated from stackoverflow.com Jul 19 '11 at 12:02
On DES and AES: use AES.
DES and AES are block ciphers: they encrypt data by "blocks", where a block is a 64-bit (for DES) or 128-bit (for AES) quantity. To encrypt a "message" which is not a single block, you need to use a "chaining mode" and possibly a "padding": the chaining mode defines how data is split into blocks and assembled again, and the padding consists in extra bytes added at the end of the message so that the total length is appropriate for whatever splitting the chaining mode uses. The padding must be such that, upon decryption, it can unambiguously removed.
The "standard" chaining mode and padding are called, respectively, CBC and PKCS#5. The PKCS#5 padding adds between 1 and n bytes, where n is the block length (hence 8 for DES, 16 for AES), so that the total padded length is a multiple of n. CBC links blocks together and requires an Initialization Vector (IV) which should be a sequence of n random bytes; it is very important that the IV bytes are generated with a cryptographically strong random number generator (i.e.
For the block cipher itself: DES comes in two flavors, the "original" DES, and "Triple-DES", also called "3DES" or sometimes simply "DES". The original DES uses a 64-bit key, out of which 8 bits are ignored, so the effective key length is 56 bits, and that's too short for security. 3DES uses a 192-bit key (24 bits are ignored, so 168-bit effective key length) and is believed to be robust; it is also three times slower than DES, which is already not that fast.
AES was designed to replace DES, and is generally thought to be better in all respects. AES has three flavors, dubbed AES-128, AES-192 and AES-256, which differ by the key length (of 128, 192 and 256 bits, respectively). 128 bits are more than enough for security, and longer keys imply a slight computational overhead, so a 128-bit key is preferred.
To get a list of algorithms supported by a Java virtual machine, try this:
(This is for "normal" Java; for Android you will probably need to change things a bit with regards to the final output.)
The encryption algorithms will be those where the string begins by "
If you are in a situation where encryption is warranted, then chances are that you will also need an integrity check; see
I found that these settings work on Android 1.5:
I counted on BouncyCastle being in Android, and I put BouncyCastle in my server-side project -- just a jar (bcprov-jdk16-145.jar). No eclipse plug-in, so had to drop it into the lib/ext directory of the JRE that the eclipse project was using.
However, posts such as this one make me suspect that I still might run into devices that don't have the algorithms that I need.
Android could support any through the bouncy castle java libraries. I'm looking for an openssl port to android using the NDK to make it faster, but we'll see.