How does the App Security API encrypt data?

[Shlomo_H_]

The App Security API seems to make it very easy to encrypt data in hybrid HTML5 apps, but the documentation doesn't give much data on how it works:

The confidentiality and integrity of the sealed chunk is protected by encryption and signing. You do not need to deal with encryption, signing, or key management; the App Security API does this for you.

What encryption algorithm is used? What key is used (when not providing an 'extraKey')?

Thank you.

[PaulF_IntelCorp]

Shlomo -- I'll ask one of the experts on that API to respond. --Paul

[Dan_S_Intel · Accepted solution]

Hi Shlomo,

The encryption-decryption of the data in App Security API is done using AES-GCM algorithm.

The AES-GCM key is derived from device specific attributes (hardware and software) along with an extra key (if provided during createFromData api).

Thanks,

Dan.