|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/secure-api-keys-with-a-public-key-cryptography-on-android/
课程评论：没有评论
**课程名称：** 安卓应用中安全地存储API密钥——使用公钥加密 **课程概述：** 本课程将教授您如何在安卓应用程序中安全地存储API密钥，防止其暴露给公众。我们将结合使用公钥加密（非对称加密）、安卓密钥库系统（Android Keystore System）、加密共享偏好（Encrypted Shared Preferences）以及我们自己的后端服务器，来实现这一目标。 **核心概念：** * **公钥加密（公钥密码学）：** 是一种使用一对密钥——公钥和私钥——的加密方法。这对密钥在数学上是相关的，但无法相互推导。这种方法可以帮助我们在客户端和服务器之间安全地交换数据。 * **API密钥的安全存储：** API密钥将首先安全地存储在我们的后端服务器上。 * **通信过程：** 服务器和客户端将交换公钥，用于在发送数据之前对其进行加密。 * **数据安全性：** 这种加密方式确保交换的实际数据不会被任何人读取。只有我们的安卓应用程序拥有私钥来解密数据，并将API密钥安全地存储在设备上。 * **安卓密钥库系统（Android Keystore System）：** 这是安卓操作系统的一部分，提供了一个安全的存储设施，用于存放加密密钥、证书和相关信息。它旨在保护敏感数据，例如用于加密和身份验证的私钥，防止未经授权的访问。 **课程内容：** 本课程将更详细地介绍安卓密钥库系统的工作原理，并说明如何利用它来安全地存储我们将生成的公钥对。
In this short-length course I will teach you how to securely store API keys in your Android App, without exposing them to the public. With the help of a Public Key Cryptography, Android Keystore System, Encrypted Shared Preferences and our own Backend server, you will achieve exactly that.Public key cryptography, also known as asymmetric cryptography, is a cryptographic approach that uses key pair: public key and private key. Each key pair consists of a public key and a private key that are mathematically related but cannot be derived one from another.This approach will help us to securely exchange the data between a client and a server. API Keys will be initially stored securely on our backend Server. The server and the client will exchange the public key, to encrypt the data, before sending it back to the client.That way we can make sure that no one can read the actual data which is exchanged. Only our Android application will hold the private key to decrypt the data, and securely store the API keys on a device.Android Keystore system is a part of the Android operating system that provides a secure storage facility for cryptographic keys, certificates, and related information. It is designed to protect sensitive data, such as private keys used for encryption and authentication, from unauthorized access.I will provide you with some more detailed information about the Keystore System itself and how does it work. We will utilize that system to securely store the Public Key Pair that is going to be generated for us.So what are you waiting for, let's get started!
