androidandroid-jetpack

Is the androidx.security:security-crypto module being deprecated or not? What is the alternative?


Trawling through android documentation and I found information indicating that the jetpack security module androidx.security:security-crypto has been deprecated, here are some of the links https://developer.android.com/privacy-and-security/cryptography#jetpack_security_crypto_library

https://android-review.googlesource.com/c/platform/frameworks/support/+/2761067

However, I find that the security module is still being used and not a lot of information about alternatives. Also, I use the kotlin extension in my project androidx.security:security-crypto-ktx:1.1.0-alpha06 for EncryptedSharedPreferences and I do not see any deprecation warning. Is this library deprecated? What should I be using instead?


Solution

  • Seems so:

    https://proandroiddev.com/securing-the-future-navigating-the-deprecation-of-encrypted-shared-preferences-91ce3c20ae8d

    https://www.spght.dev/articles/04-06-2022/owasp-m2

    https://x.com/Sp4ghettiCode/status/1786033489675944311

    https://developer.android.com/privacy-and-security/cryptography#jetpack_security_crypto_library

    Jetpack security crypto library is deprecated. This only affects cases where you have the following dependencies in your app module's build.gradle file:
    
    dependencies {
        implementation "androidx.security:security-crypto:1.0.0"
    }
    

    No idea of a good alternative. This one has some weird crashes without any official explanation of how to deal with them in case they are expected to have them:

    https://issuetracker.google.com/issues/176215143