Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Any optimized way of encrypting and decrypting a file inside Android

Tags:

java

file

android

This is the current code im using for the encrypting and decrypting process also its works how it should be, except the time for encrypting and decrypting is way to long.

import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import javax.crypto.Cipher;
import javax.crypto.CipherInputStream;
import javax.crypto.CipherOutputStream;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESKeySpec;

public class EncryptAndDecrypt{

   public static void main(String[] args) {
    try {
        String key = "myencryptedpass123";

        FileInputStream fis = new FileInputStream("File_to_encrypt.mp4");
        FileOutputStream fos = new FileOutputStream("Encrypted_file.mp4");
        encrypt(key, fis, fos);

        FileInputStream fis2 = new FileInputStream("Encrypted_file.mp4");
        FileOutputStream fos2 = new FileOutputStream("File_to_decrypt.mp4");
        decrypt(key, fis2, fos2);
    } catch (Throwable e) {
        e.printStackTrace();
    }
}

public static void encrypt(String key, InputStream is, OutputStream os) throws Throwable {
    encryptOrDecrypt(key, Cipher.ENCRYPT_MODE, is, os);
}

public static void decrypt(String key, InputStream is, OutputStream os) throws Throwable {
    encryptOrDecrypt(key, Cipher.DECRYPT_MODE, is, os);
}

public static void encryptOrDecrypt(String key, int mode, InputStream is, OutputStream os) throws Throwable {

    DESKeySpec dks = new DESKeySpec(key.getBytes());
    SecretKeyFactory skf = SecretKeyFactory.getInstance("DES");
    SecretKey desKey = skf.generateSecret(dks);
    Cipher cipher = Cipher.getInstance("DES"); 

    if (mode == Cipher.ENCRYPT_MODE) {
        cipher.init(Cipher.ENCRYPT_MODE, desKey);
        CipherInputStream cis = new CipherInputStream(is, cipher);
        doCopy(cis, os);
    } else if (mode == Cipher.DECRYPT_MODE) {
        cipher.init(Cipher.DECRYPT_MODE, desKey);
        CipherOutputStream cos = new CipherOutputStream(os, cipher);
        doCopy(is, cos);
    }
}

public static void doCopy(InputStream is, OutputStream os) throws IOException {
    byte[] bytes = new byte[64];
    int numBytes;
    while ((numBytes = is.read(bytes)) != -1) {
        os.write(bytes, 0, numBytes);
    }
    os.flush();
    os.close();
    is.close();
}

}

Now im hoping for a better solution...

like image 376
Fahid Mohammad Avatar asked May 10 '12 14:05

Fahid Mohammad


1 Answers

Definitely use a bigger buffer, but encryption is mostly CPU-bound, so it is unlikely to get much faster. Additionally

  • if you 'don't bother about the security flaws', it is better to give up on encryption altogether
  • you are using DES, don't
  • you are using a human-readable string as a key -- don't
  • that code might no work once you are doing encryption and decryption with separate instance of Cipher
  • if you are using defaults, you are setting up yourself for trouble. Use something like Cipher.getInstance("AES/CBC/PKCS5Padding")
  • why are you testing on desktop if you want this to work on Android?

And yes, if you include the key with the app, your 'DRM' is not of much use.

like image 186
Nikolay Elenkov Avatar answered Oct 16 '22 14:10

Nikolay Elenkov