File Encryption for iOS app?

[kigosa]

Hello there,

i hope this is something that can be solved using adobe flash/air to develop iPad apps. There are certain techniques in objective C so ensure the file contained in an ipa file are stored encrypted. since i am trying to do an app with some sensitive data, i need to find a way to encrypt the installed files. so that if the iPad falls into the wrong hands, they cant access the data that easily. i am loading images, 3d data, and other stuff dynamically from within my app. now i need to make sure that these files are stored encrypted.

are there any commands in air, or within the ADT package commandline that provide such functionality?

or do i have to switch to xCode and objective C?

-kigosa

[Guest]

Hi:

Currently there is no "inbult" feature in AIR to work with Encryption. You can any time use your own encryption logic or some third party AS Library to achieve the same thing. In the future releases of AIR you will be able to use the EncryptedLocalStore APIs in AIR(Currently they don’t work on mobile) to store sensitive data and keys in Encrypted and private(accessible only to your app) manner.

Hope this helps!

Regards,

Saumitra Bhave

AIR iOS

[kigosa]

is there any scheduled date, when this will be implemented?

i am looking into as3crypto right now, and this seems to be some sort of solution for my problem. hope this doesn't cost to much performance, since there is very little of that on the iPad to begin with.

anyway, thanks for your quick reply, i was searching for hours for something that doesn't exist sofar...

-kigosa

[Joe ... Ward]

AIR does have a built-in SQL database that supports encryption.

In the next major release of AIR, there are two new features that help this use case. There is a cryptographically strong random number generator, which you can use to implement a secure encryption algorithm. There is also a feature that lets you extend the runtime with your own native code. In this case, you could write a native data manager in objective C and use it from your ActionScript code to secure your data using the techniques you alluded above.

[smith6809]

EncryptedLocalStore can be uesed in next mobile air ?android and ios?

I hope so!

[Guest]

Yes on Android and iOS both.

[PabloReyN]

Hi everyone!

Two questions about EncryptedLocalStore and iOS:

1) EncryptedLocalStore runs with Apple's app store policies for local storage (iOS 5.0.1 data storage)?

2) If i use EncryptedLocalStore in my app to manage "In-App Purchases" (saving purchases into local encrypted file) ... Do I have to answer "YES" to the itunes connect question of encrypt?:

Have you added or made changes to encryption features since you last uploaded a binary for this product?

Thanks!

[sbhave]

Hi

1. The Data Storage pocicies doesnt apply to ELS APIs. because ELS data is not stored in your application's folder hierarchy. Its stored in iOS keychain and persist even after you completely un-install the application.

2. No, IMO, You need no do that because ELS only uses the iOS Native KeyChain APIs. There is no custom encryption logic there.