Skip to content

Security issue on Android < 4.4 #25

@ysamlan

Description

@ysamlan

See http://android-developers.blogspot.com/2013/08/some-securerandom-thoughts.html

Since this library appears to be directly using numbers from a default-initialized SecureRandom, it should not be used on Android versions below 4.4 without a separate intialization step.

Either the fix should be applied in the code here where applicable (via reflection, probably, to avoid borking non-Android environments), or there should be a big disclaimer and a minimum Android recommendation of 4.4 rather than 2.3.3 for using this library.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions