hi,sir! how to decrpt this kind of keystore.xml item from andorid device?

[andersling]

hi,sir! Thanks for your greate job!
but i encounter this problem:
in the keystore.xml form andrid, I found this keypair value, but i can't find any method to decrpt it:

[0,"7gSHycMPx28u1rgRr+/YpSgWxHaOg+2Ckog9OJQ+9n9JAPXb/go0FoBvYvp57NagOg31Dq3a1PejtmSXEtZ5dM/MW7V9WZYecLrfe86wjgc","+vMax4iwA+csF/k5"]

any one has some tips will be greate apreciated!

thanks a lot!

[andersling]

<string name="client_static_keypair_pwd_enc">[2,&quot;3WRAH98QPMiKSnxxx3dmqTufGG+rJm2bSIxcu\/cyFzUnFAuwShO0h2cxxxxMQk8Awmp7dh7Zi4Q&quot;,&quot;rUQKAj3IdcTYvkZKYvqd\/Q&quot;,&quot;27yTag&quot;,&quot;8dAj7ciKg0xxxxxJV1A&quot;]</string> <long name="client_static_keypair_enc_success" value="3" /> <boolean name="can_user_android_key_store" value="true" />

[ben221199]

https://github.com/ben221199/WAPI/blob/master/src/main/java/nl/ben221199/wapi/tools/EncryptedClientStaticKeypair.java

[andersling]

https://github.com/ben221199/WAPI/blob/master/src/main/java/nl/ben221199/wapi/tools/EncryptedClientStaticKeypair.java

Sir,Thanks for your reply!
But I found the link you sent seems thant It only support type=2, but the [client_static_keypair_enc] 's type is 0, and the fields count is 3

any ideas? big thanks!

[ben221199]

I think I haven't type 0 available yet.

[houjianwen123]

Hi ben, I write a java program to get the key but thow the exception "PBKDF2WithHmacSHA1And8bit SecretKeyFactory not available" is this program cannot run JDK11 ?

[ben221199]

I think you forgot to import BouncyCastle.

[houjianwen123]

Thanks for your reply, I do only copy this jar then write a simple main class java with import this jar to try , it can decrpt on my IDEA, but when I export with the related jar bcprov-jdk15on-1.69.jar as project jar file, to run java -jar , then it show "PBKDF2WithHmacSHA1And8bit SecretKeyFactory not available". just dont know what difference between ide and the export jar .....

[ben221199]

Does the exported JAR also have BouncyCastle packed? Also, it could be possible that the code only runs with OpenJDK.