StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>Avoid using the default algorithm which is the case when doing <code>new SecureRandom();</code></p> <p>Instead do:</p> <pre><code>SecureRandom.getInstance("SHA1PRNG", "SUN"); </code></pre> <p>If someone changes the default algorithm (as stated by @Jules) you won't be impacted.</p> <hr> <h3>Edited for Android:</h3> <p>For android, take a look at :</p> <ul> <li><a href="https://android-developers.googleblog.com/2016/06/security-crypto-provider-deprecated-in.html" rel="nofollow noreferrer">https://android-developers.googleblog.com/2016/06/security-crypto-provider-deprecated-in.html</a></li> <li><a href="http://www.infosecisland.com/blogview/24773-Android-N-Deprecating-Crypto-Provider-and-SHA1PRNG-Algorithm.html" rel="nofollow noreferrer">http://www.infosecisland.com/blogview/24773-Android-N-Deprecating-Crypto-Provider-and-SHA1PRNG-Algorithm.html</a></li> <li><a href="https://security.stackexchange.com/questions/128144/android-n-security-crypto-provider-is-deprecated">https://security.stackexchange.com/questions/128144/android-n-security-crypto-provider-is-deprecated</a></li> <li><a href="https://stackoverflow.com/questions/39097099/security-crypto-provider-deprecated-in-android-n">Security "Crypto" provider deprecated in Android N</a></li> </ul> <blockquote> <p>On Android, we don’t recommend specifying the provider. In general, any call to the Java Cryptography Extension (JCE) APIs specifying a provider should only be done if the provider is included in the application or if the application is able to deal with a possible ProviderNotFoundException.</p> </blockquote> <p>...</p> <blockquote> <p>in Android N we are deprecating the implementation of the SHA1PRNG algorithm and the <strong>Crypto</strong> provider altogether</p> </blockquote>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload