OkHttpManager icon indicating copy to clipboard operation
OkHttpManager copied to clipboard

SecureRandom is insecure on Android versions 16-18

Open naskovai opened this issue 6 years ago • 0 comments

We are analyzing open source repositories for security vulnerabilities caused by various usage patterns of the Java Cryptography Architecture, and it seems that OkHttpManager has one.

It supports Android versions 16-18. Additionally, it uses SecureRandom.

The Android security team has been identified an issue with the key generation functionality of JCA and has proposed a fix, which is publicly available at https://android-developers.googleblog.com/2013/08/some-securerandom-thoughts.html

naskovai avatar Apr 15 '18 01:04 naskovai