Secure Api Keys With A Public–Key Cryptography On Android

What you'll learn
Public-Key Cryptography
Generate Private/Public Key Pair
Encrypt/Decrypt the Data
Establish a Secure Communication
Secure Exchange of API Keys between Android app and a Server
Android Keystore System
Learn more about Security Concepts in Android
Encrypted Shared Preferences
Learn how to Secure your Android app
Requirements
Basic knowledge about Kotlin and Jetpack Compose
Knowledge about Kobweb Framework is a plus
Description
In this short-length course I will teach you how to securely store API keys in your Android App, without exposing them to the public. With the help of a Public Key Cryptography, Android Keystore System, Encrypted Shared Preferences and our own Backend server, you will achieve exactly that.Public key cryptography, also known as asymmetric cryptography, is a cryptographic approach that uses key pair: public key and private key. Each key pair consists of a public key and a private key that are mathematically related but cannot be derived one from another.This approach will help us to securely exchange the data between a client and a server. API Keys will be initially stored securely on our backend Server. The server and the client will exchange the public key, to encrypt the data, before sending it back to the client.That way we can make sure that no one can read the actual data which is exchanged. Only our Android application will hold the private key to decrypt the data, and securely store the API keys on a device.Android Keystore system is a part of the Android operating system that provides a secure storage facility for cryptographic keys, certificates, and related information. It is designed to protect sensitive data, such as private keys used for encryption and authentication, from unauthorized access.I will provide you with some more detailed information about the Keystore System itself and how does it work. We will utilize that system to securely store the Public Key Pair that is going to be generated for us.So what are you waiting for, let's get started!
Overview
Section 1: Introduction
Lecture 1 Introduction
Section 2: The Basics of Cryptography
Lecture 2 The History of Cryptography
Lecture 3 The Principles of Cryptography
Lecture 4 Symmetric Key Cryptography
Lecture 5 Asymmetric Key Cryptography
Lecture 6 Hash functions
Section 3: Client Application - Android
Lecture 7 Source Code - Android App
Lecture 8 Setup the Project
Lecture 9 Android's Keystore System
Lecture 10 Create KeyPairHandler
Lecture 11 Implement KeyProviderService
Lecture 12 Implement EncryptedPreferences
Lecture 13 Create the MainScreen UI
Lecture 14 Fetch Api Keys and Store them Securely
Section 4: Server Application - Kobweb/Ktor
Lecture 15 Source Code - Kobweb Server
Lecture 16 About Kobweb Framework
Lecture 17 Create DataEncryption object
Lecture 18 Create Key Provider Endpoint
Lecture 19 Let's Test it out!
Section 5: Server Deployment
Lecture 20 Let's Deploy our Server!
Section 6: Security Best Practices
Lecture 21 More Security Advices
Android developers,Security Engineers,People who want to secure their Apps before publishing them on Play Store,Anyone who wants to improve the overall Security of their Apps


Homepage

https://www.udemy.com/course/secure-api-keys-with-a-public-key-cryptography-on-android/