Silk Road forums
Discussion => Security => Topic started by: TheDuke on August 15, 2013, 01:07 pm
-
So first off I downloaded agp and am having no luck with it. Whenever I try to save my keys I get some strange unknown object in stream error. It is really frustrating me. I know agp isnt the most proven encryption but its atleast something. Any other reccomended programs? Also whats the general conscientious on the built in device encryption option for android phones? Any better options available?
-
Did you try the standard troubleshooting? Like restarting the phone or uninstalling and reinstalling apg?
Also APG is actually great encryption, you're acting like we're going to give you a lecture on how insecure it is but it's really just as secure as any other PGP program as it's open source and supports large keys.
-
tried restarting with no luck but will try uninstall and reinstall. I am glad to hear your support for agp. Honestly I heard comments about it being newer and others stating never use phones for encryption. Honestly didnt know but assumed the worse.
-
Unknown object in stream? What version of Android is that, never seen that particular error? Well, regardless, when you say "save my keys," what do you mean exactly? Are you trying to import other people's public keys, or are you trying to import your own private key?
There's recently been a big to-do about a bug in the standard Java encryption library. Note that Android is built on Java; the vast majority of apps are written in Java, and it's likely that Java developers would naturally use the standard Java libraries. They're calling it an Android bug but it's really a Java bug and for all I know apg uses its own algorithm, but I wouldn't generate any keys in Android unless you really know what you're doing.
Also, I think you may be confusing "don't use phones for encryption" with what people should be saying, which is "don't ever trust a cell phone with your secrets." The entire device is insecure -- you aren't even the "owner" of the phone when you buy the thing (as in you don't have superuser permissions).
-
It is very likely a Java error as described it does say something in the lines of java but I can not remember it exactly. I googled it and found lots of people with the same problem but no real answers. I am trying to import both other peoples keys as well as my own private key.