3 ms·
Android's encryption is pretty useless, as it forces you to use the same key for the encryption and for the screen lock. So either you have a secure encryption
by gst 13y ago
Android's encryption is pretty useless, as it forces you to use the same key for the encryption and for the screen lock. So either you have a secure encryption key and a way too complicated screen lock key, or you have a reasonable screen lock key, and a totally insecure encryption key (that can be brute-forced in less than a second).
- MichaelGG 13y agoWhy would they implement the feature that way? Why not have a boot passphrase? Wouldn't you need some custom hardware to extract the keys out of RAM? And Google is in the right position to mandate some extra security hardware, if needed to provide a secure design.
- brohee 13y agoNot true anymore. Device encryption can differ from lock screen nowadays. But speaking of lock screen, people have built robot to brute force it, so shutting down after a few failures is definitely a good idea.
- gst 13y agoIt appears still to be the case on my Nexus 5. Or are there any hidden options to fix this problem?
- brohee 13y agoSorry need an app : https://play.google.com/store/apps/details?id=org.nick.cryptfs.passwdmanager https://play.google.com/store/apps/details?id=org.nick.crypt... Discussion about the issue : https://code.google.com/p/android/issues/detail?id=29468 https://code.google.com/p/android/issues/detail?id=29468