Return to Question

I have some questions.

I'm using the Android Keystore to store an asymetric cryptographic (to decrypt a file containing an asymetric key). I did that because I want to encrypt a large set of data and an asymetric isn't enough ans they keystore has symetric keys since SDK 23.

So my questions are :

• In classic HSM you can't access to the cryptographic keys, you only send your data and the HSM does the cryptographic operations. But in Android you retrieve from the Keystore the key to do manually the operations (With Cipher etc..). Is it safe?
• If it's not safe, is it possible to wipe the keys from the memory after using them? (At the end of my functions for example)
• If it's safe, what are the risks? Having the RAM corrupted by a virus?

Thank you for your answers.

I'm using the Android Keystore to store an asymmetric cryptographic (to decrypt a file containing an asymmetric key). I did that because I want to encrypt a large set of data and an asymmetric isn't enough ans they keystore has symmetric keys since SDK 23.

• In classic HSM you can't access to the cryptographic keys, you only send your data and the HSM does the cryptographic operations. But in Android you retrieve from the Keystore the key to do manually the operations (With Cipher etc..). Is it safe?
• If it's not safe, is it possible to wipe the keys from the memory after using them? (At the end of my functions for example)
• If it's safe, what are the risks? Having the RAM corrupted by a virus?