T2 Encryption Library - Android
The T2 Encrpytion Library provides FIPS 140-2 compliant data-at-rest security to Android applications
About the Library
This library is used in T2 Android applications to provide data-at-rest security that complies with FIPS 140-2 specifications for encryption.
Getting Started
Android Build Instructions
Note that buildall.sh builds all of the openssl/fips files then puts the results in directory specified in setEnvOpenSslFiles.sh
Tools Necessary for Build
MAC OS-X Android ndk (Make sure that $ANDROID_NDK_ROOT is defined)
Steps:
- Download files
- Build files
- Test result
1. Download Files
First, obtain fips/opsnssl files copy them to fcids/dev:
Option 1 (the official way):
Obtain the official dist and copy openssl-fips-??tar.gz, and openssl-1.0.1?.tar.gz to the fcads/dev directory"
Option 2:
Copy the files from the local distribution
use command:make copyLocalFipsFiles
(Alternately, the main build file will offer to copy these files for you if they are missing)
Results:
fcads/dev
openssl-fips-??tar.gz
openssl-1.0.1?.tar.gz
Next, obtain sqlcipher source files...
Option 1 (the official way):
Clone sqlcipher source files from Github - into fcads/dev/
git clone git://github.com/sqlcipher/android-database-sqlcipher.git
make init
(Downloads all dependencies - LOTS OF FILES ~ 3 gB)
Option 2:
Copy the files from the local distribution
use command:cp -r localFipsSslFiles/android-database-sqlcipher ./
(Alternately, the main build file will offer to copy these files for you if they are missing)
Results:
fcads/dev/android-database-sqlcipher
.. Lots of files and directories (~2.9 Gb)
2. BuildFiles
Automated method (all in one): execute . ./buildAll.sh
3. Android test programs
Open FcadsTestAndroid in Eclipse
Then build and run the Test app
This tests three things:
- That that an encrypted database can be created, written to and read for successfully
- That FIPS can be enabled properly
- Extensive unit tests are run which test the T2Crypto functionality (lost password implementation)
Known Issues
There are no known issues with the library at this time.
License and Contributors
Contributors
David Coleman
Scott Coleman
David Cooper
Bob Kayl
Steve Ody
License
2016 The National Center for Telehealth and Technology Provider Resilience is Licensed under the NASA Open Source License.
Copyright 2009-2014 United States Government as represented by the Chief Information Officer of the National Center for Telehealth and Technology. All Rights Reserved.
Copyright 2009-2014 Contributors. All Rights Reserved.
THIS OPEN SOURCE AGREEMENT ("AGREEMENT") DEFINES THE RIGHTS OF USE, REPRODUCTION, DISTRIBUTION, MODIFICATION AND REDISTRIBUTION OF CERTAIN COMPUTER SOFTWARE ORIGINALLY RELEASED BY THE UNITED STATES GOVERNMENT AS REPRESENTED BY THE GOVERNMENT AGENCY LISTED BELOW ("GOVERNMENT AGENCY"). THE UNITED STATES GOVERNMENT, AS REPRESENTED BY GOVERNMENT AGENCY, IS AN INTENDED THIRD-PARTY BENEFICIARY OF ALL SUBSEQUENT DISTRIBUTIONS OR REDISTRIBUTIONS OF THE SUBJECT SOFTWARE. ANYONE WHO USES, REPRODUCES, DISTRIBUTES, MODIFIES OR REDISTRIBUTES THE SUBJECT SOFTWARE, AS DEFINED HEREIN, OR ANY PART THEREOF, IS, BY THAT ACTION, ACCEPTING IN FULL THE RESPONSIBILITIES AND OBLIGATIONS CONTAINED IN THIS AGREEMENT.
Government Agency: The National Center for Telehealth and Technology
Government Agency Original Software Designation: ProviderResilience
Government Agency Original Software Title: ProviderResilience
User Registration Requested.
Please send email with your contact information to: [email protected]
Government Agency Point of Contact for Original Software: [email protected]
About The National Center for Telehealth & Technology
Our mission at the National Center for Telehealth & Technology is to lead the innovation of mobile health and telehealth solutions to deliver psychological health and traumatic brain injury care and support to our nation’s warriors, veterans and their families. T2 is a Department of Defense organization, a component center of the Defense Centers of Excellence for Psychological Health and Traumatic Brain Injury.
Our vision is world-class health care and optimized health in the DoD through effective leveraging of behavioral science and technology.