Modern security for Android Developers
summary
Covers concrete steps: explains AES CBC and padding, shows using KeyGenerator to create a master key stored in Keystore, and demonstrates Jetpack Security (EncryptedFile and EncryptedSharedPreferences) plus Google Tink for older devices. Describes biometric prompt backed by TEE and secure elements (Titan chip on Pixel, secure element enabled on Android P+), warns against hardcoded native strings, and gives certificate pinning and keystore-backed SSL socket setup that prevents MITM.
AI-written summary · about
chapters (8)
- 0:00Introduction and disclaimer
- 3:07Basics of encryption on Android
- 8:04Hardware vs software encryption
- 12:24Modern keystore and security library
- 17:43Biometric authentication security
- 20:33Native code and data protection
- 22:57Secure certificate handling
- 25:04Closing remarks and Q&A
related talks
34mDemystifying Android Security
28mModern security for Android Developers
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
37mPractical security for Android apps
30mSecurity at your fingertips
39mSecurity on Android: What's next
23mData Encryption on Android