Timeline for Usage of Android Keystore
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 7, 2018 at 3:18 | comment | added | Dylan Nicholson | If you're using the AndroidKeystore to generate the keys for you it's nigh on impossible to verify this as there's no way of knowing what key bytes you should be scanning for in a memory dump. But when you import the key bytes in yourself (which is necessary, for instance, if you want to do ECDH), they're definitely still present in memory after adding to the key store. | |
| May 29, 2018 at 17:44 | comment | added | Mike Ounsworth | "The system process that does the operations does this for you." Can you back up this statement? Java's garbage collector is famous for returning memory to the OS without zeroizing it, is Dalvik any different? | |
| Mar 30, 2018 at 14:56 | review | First posts | |||
| Mar 30, 2018 at 15:34 | |||||
| Mar 30, 2018 at 14:56 | history | answered | Evan Tobin | CC BY-SA 3.0 |