(Android™) Deriving a 256-bit AES Secret Key from a Password Using SHA256

This example demonstrates how to derive a 256-bit secret key for AES encryption from an password string. (A more secure way of deriving secret keys from passwords is via PBKDF2, and Chilkat has examples for this on example-code.com).

Chilkat Android™ Downloads Android™ Java Libraries Android C/C++ Libraries

// Important: Don't forget to include the call to System.loadLibrary
// as shown at the bottom of this code sample.
package com.test;

import android.app.Activity;
import com.chilkatsoft.*;

import android.widget.TextView;
import android.os.Bundle;

public class SimpleActivity extends Activity {

  private static final String TAG = "Chilkat";

  // Called when the activity is first created.
  @Override
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCrypt2 crypt = new CkCrypt2();

    String password = "mySecretPassword";

    crypt.put_EncodingMode("hex");

    // We're going to hash the utf-8 byte representation of the password.
    // For this example, the utf-8 byte representation is identical to the us-ascii 
    // representation because there are no 8bit chars (such as non-English or chars with accent marks.)
    crypt.put_Charset("utf-8");

    // Compute the SHA-256 hash of the password, and return the hash
    // in hexidecimal string form:
    String strSecretKeyHex = crypt.hashStringENC(password);

    // Set our encryption algorithm to 256-bit AES (CBC mode)
    crypt.put_CryptAlgorithm("aes");
    crypt.put_CipherMode("cbc");
    crypt.put_KeyLength(256);
    crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F","hex");

    // Now set the 256-bit binary secret key:
    crypt.SetEncodedKey(strSecretKeyHex,"hex");

    // That's all for this example.  We've setup the encryptor with our
    // 256-bit key derived from a password string.  There are other examples
    // to show the calls for encrpyting / decrypting..

  }

  static {
      System.loadLibrary("chilkat");

      // Note: If the incorrect library name is passed to System.loadLibrary,
      // then you will see the following error message at application startup:
      //"The application <your-application-name> has stopped unexpectedly. Please try again."
  }
}