3 ms·
What an odd article. The code showing how the database is encrypted on the device is obviously open source so it's not really a very interesting feat of detecti
by tomatocracy 6y ago
What an odd article. The code showing how the database is encrypted on the device is obviously open source so it's not really a very interesting feat of detective work to... read the code and find out how it works. They could even have just copied the code.
The much more interesting question is how they might extract keys from the Android Keystore (where key material is very often stored in a Secure Element or similar), but they don't even mention that this might be quite challenging - the article just ignores the question.
- izacus 6y agoYou can get the keys if you root the device and force keystore to be software backed. But that has to happen before you provision Signal and it's kinda your prerogative as the device owner.