topic Hi Shlomo, in Software Archive

How does the App Security API encrypt data?

Shlomo_H_ — Fri, 29 Jul 2016 18:45:55 GMT

The App Security API seems to make it very easy to encrypt data in hybrid HTML5 apps, but the documentation doesn't give much data on how it works:

The confidentiality and integrity of the sealed chunk is protected by encryption and signing. You do not need to deal with encryption, signing, or key management; the App Security API does this for you.

What encryption algorithm is used? What key is used (when not providing an 'extraKey')?

Thank you.

Shlomo -- I'll ask one of the

PaulF_IntelCorp — Fri, 29 Jul 2016 22:09:42 GMT

Shlomo -- I'll ask one of the experts on that API to respond. --Paul

Hi Shlomo,

Dan_S_Intel — Mon, 01 Aug 2016 14:28:49 GMT

Hi Shlomo,

The encryption-decryption of the data in App Security API is done using AES-GCM algorithm.

The AES-GCM key is derived from device specific attributes (hardware and software) along with an extra key (if provided during createFromData api).

Thanks,

Dan.