Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security alert from play store #50

Open
nileshpatil9999 opened this issue Jan 3, 2020 · 0 comments
Open

Security alert from play store #50

nileshpatil9999 opened this issue Jan 3, 2020 · 0 comments

Comments

@nileshpatil9999
Copy link

nileshpatil9999 commented Jan 3, 2020

Your app contains unsafe cryptographic encryption patterns. Please see this Google Help Center article ( https://support.google.com/faqs/answer/9450925 ) for details.Vulnerable classes:Org.spongycastle.openpgp.operator.jcajce.JcePBEKeyEncryptionMethodGenerator.encryptSessionInfo

I am getting this warning for below method implementation.

protected byte[] encryptSessionInfo(int encAlgorithm, byte[] key, byte[] sessionInfo) throws PGPException {
try {
String cName = PGPUtil.getSymmetricCipherName(encAlgorithm);
Cipher c = this.helper.createCipher(cName + "/CFB/NoPadding");
SecretKey sKey = new SecretKeySpec(key, PGPUtil.getSymmetricCipherName(encAlgorithm));
c.init(1, sKey, new IvParameterSpec(new byte[c.getBlockSize()]));
return c.doFinal(sessionInfo, 0, sessionInfo.length);
} catch (IllegalBlockSizeException var7) {
throw new PGPException("illegal block size: " + var7.getMessage(), var7);
} catch (BadPaddingException var8) {
throw new PGPException("bad padding: " + var8.getMessage(), var8);
} catch (InvalidAlgorithmParameterException var9) {
throw new PGPException("IV invalid: " + var9.getMessage(), var9);
} catch (InvalidKeyException var10) {
throw new PGPException("key invalid: " + var10.getMessage(), var10);
}
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant