1

I wanted to use Tink library and able to encrypt and decrypt data but not understanding what is the purpose of master key in its creation and how to create a master key for it.

 private fun getOrGenerateNewKeysetHandle(): KeysetHandle {
        return AndroidKeysetManager.Builder()
            .withSharedPref(activity, EFE_TINK_KEYSET_NAME, null)
            .withKeyTemplate(AeadKeyTemplates.AES256_GCM)
            .withMasterKeyUri("android-keystore://tink_master_key")
            .build().keysetHandle
    }

Here, how should I create tink_master_key?

marsuser
  • 125
  • 9

1 Answers1

1

A master key is a secret key in Android Keystore. Tink protects its keysets by encrypting them with this master key.

You don't have to generate the master key yourself, but Tink would do that if the master key doesn't exist yet.

You can also generate it following Android Keystore documentation or using AndroidKeystoreKmsClient.getOrGenerateNewAeadKey.

Hope that helps, Thai.

Thai Duong
  • 199
  • 8