OkHttpManager
OkHttpManager copied to clipboard
SecureRandom is insecure on Android versions 16-18
We are analyzing open source repositories for security vulnerabilities caused by various usage patterns of the Java Cryptography Architecture, and it seems that OkHttpManager has one.
It supports Android versions 16-18. Additionally, it uses SecureRandom.
The Android security team has been identified an issue with the key generation functionality of JCA and has proposed a fix, which is publicly available at https://android-developers.googleblog.com/2013/08/some-securerandom-thoughts.html