Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Is Card Data Encrypted In The App? #39

Closed
TheLastProject opened this issue Oct 24, 2020 · 4 comments
Closed

Is Card Data Encrypted In The App? #39

TheLastProject opened this issue Oct 24, 2020 · 4 comments
Labels
state: help wanted I looked into this issue but couldn't solve it quickly type: enhancement New feature or request

Comments

@TheLastProject
Copy link
Member

Issue by trymeouteh
Wednesday Dec 12, 2018 at 21:31 GMT
Originally opened as brarcher/loyalty-card-locker#284

Is the card data readable by other apps or is it encrypted to ensure third part apps and malware cannot obtain the card data?

If this is not the case I would like suggest to have the app data encrypted.
@TheLastProject TheLastProject added type: enhancement New feature or request state: help wanted I looked into this issue but couldn't solve it quickly labels Oct 24, 2020
@TheLastProject
Copy link
Member Author

Comment by brarcher
Thursday Dec 13, 2018 at 04:27 GMT

Card data is not encrypted at rest. Instead, it uses internal app storage. The Android protection model for this is that only the specific app is allowed to access that data.

@TheLastProject
Copy link
Member Author

Comment by trymeouteh
Friday Dec 21, 2018 at 03:18 GMT

Wouldn't be more secure and safer to encrypt the app data? The app could store gift cards which have some value like money.

@TheLastProject
Copy link
Member Author

Comment by brarcher
Monday Dec 24, 2018 at 22:15 GMT

It would be safer, for those Android devices that support a Trusted Execution Environment for Keystore. At this time I will not be working on that, however if someone were interested in contributing the needed changes I'd be glad to review them.

@TheLastProject
Copy link
Member Author

I'm closing this issue because unless you rooted your device, Android's app model already prevents this data from being accessed from other apps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
state: help wanted I looked into this issue but couldn't solve it quickly type: enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@TheLastProject