T2 Encryption Library

General

Category
Free
Tag
Security
License
N/A
Registered
Jun 28, 2016
Favorites
0
Link
https://github.com/Telehealth-and-Technology/FIPSLibrary-Android
See also
Trialer
Puff
Safe To Run
AES Encryption
JealousSky

Additional

Language
Java
Version
N/A
Created
Jun 22, 2016
Updated
Jun 23, 2016 (Retired)
Owner
Telehealth-and-Technology
Contributors
steveody
Scott Coleman (scolemanT2)
2
Activity
Badge
Generate
Download
Source code

T2 Encryption Library - Android

The T2 Encrpytion Library provides FIPS 140-2 compliant data-at-rest security to Android applications

About the Library

This library is used in T2 Android applications to provide data-at-rest security that complies with FIPS 140-2 specifications for encryption.

Getting Started

Android Build Instructions

Note that buildall.sh builds all of the openssl/fips files then puts the results in directory specified in setEnvOpenSslFiles.sh

Tools Necessary for Build


MAC OS-X
Android ndk (Make sure that $ANDROID_NDK_ROOT  is defined)

Steps:


  1. Download files
  2. Build files
  3. Test result
1. Download Files

First, obtain fips/opsnssl files copy them to fcids/dev:

Option 1 (the official way):

Obtain the official dist and copy openssl-fips-??tar.gz, and openssl-1.0.1?.tar.gz to the fcads/dev directory"

Option 2:

Copy the files from the local distribution
use command: make copyLocalFipsFiles

(Alternately, the main build file will offer to copy these files for you if they are missing)

 Results:  
  fcads/dev
  openssl-fips-??tar.gz 
  openssl-1.0.1?.tar.gz  

Next, obtain sqlcipher source files...

Option 1 (the official way):

Clone sqlcipher source files from Github - into fcads/dev/
git clone git://github.com/sqlcipher/android-database-sqlcipher.git
make init

(Downloads all dependencies - LOTS OF FILES ~ 3 gB)

Option 2:

Copy the files from the local distribution
use command: cp -r localFipsSslFiles/android-database-sqlcipher ./

(Alternately, the main build file will offer to copy these files for you if they are missing)

 Results: 
  fcads/dev/android-database-sqlcipher
  .. Lots of files and directories (~2.9 Gb)
2. BuildFiles

Automated method (all in one): execute . ./buildAll.sh

3. Android test programs

Open FcadsTestAndroid in Eclipse

Then build and run the Test app

This tests three things:

  1. That that an encrypted database can be created, written to and read for successfully
  2. That FIPS can be enabled properly
  3. Extensive unit tests are run which test the T2Crypto functionality (lost password implementation)

Known Issues

There are no known issues with the library at this time.

License and Contributors

Contributors

David Coleman
Scott Coleman
David Cooper
Bob Kayl
Steve Ody

License

2016 The National Center for Telehealth and Technology Provider Resilience is Licensed under the NASA Open Source License.

Copyright 2009-2014 United States Government as represented by the Chief Information Officer of the National Center for Telehealth and Technology. All Rights Reserved.

Copyright 2009-2014 Contributors. All Rights Reserved.

THIS OPEN SOURCE AGREEMENT ("AGREEMENT") DEFINES THE RIGHTS OF USE, REPRODUCTION, DISTRIBUTION, MODIFICATION AND REDISTRIBUTION OF CERTAIN COMPUTER SOFTWARE ORIGINALLY RELEASED BY THE UNITED STATES GOVERNMENT AS REPRESENTED BY THE GOVERNMENT AGENCY LISTED BELOW ("GOVERNMENT AGENCY"). THE UNITED STATES GOVERNMENT, AS REPRESENTED BY GOVERNMENT AGENCY, IS AN INTENDED THIRD-PARTY BENEFICIARY OF ALL SUBSEQUENT DISTRIBUTIONS OR REDISTRIBUTIONS OF THE SUBJECT SOFTWARE. ANYONE WHO USES, REPRODUCES, DISTRIBUTES, MODIFIES OR REDISTRIBUTES THE SUBJECT SOFTWARE, AS DEFINED HEREIN, OR ANY PART THEREOF, IS, BY THAT ACTION, ACCEPTING IN FULL THE RESPONSIBILITIES AND OBLIGATIONS CONTAINED IN THIS AGREEMENT.

Government Agency: The National Center for Telehealth and Technology
Government Agency Original Software Designation: ProviderResilience
Government Agency Original Software Title: ProviderResilience
User Registration Requested.
Please send email with your contact information to: robert.a.kayl.civ@mail.mil
Government Agency Point of Contact for Original Software: robert.a.kayl.civ@mail.mil

About The National Center for Telehealth & Technology

Our mission at the National Center for Telehealth & Technology is to lead the innovation of mobile health and telehealth solutions to deliver psychological health and traumatic brain injury care and support to our nation’s warriors, veterans and their families. T2 is a Department of Defense organization, a component center of the Defense Centers of Excellence for Psychological Health and Traumatic Brain Injury.

Our vision is world-class health care and optimized health in the DoD through effective leveraging of behavioral science and technology.