Hot answers tagged

26

There should have been a warning when you begin the encryption that you had to agree to. The only way to unencrypt it is to perform a factory reset, thereby wiping your data partition completely.


15

The Broadcom bcm4329 chipset in a lot of android phones (Nexus One, Evo, G1) probably many more) supports monitor/promiscuous mode. The driver needs to be modified to allow monitor mode to be enabled. Here is the source of the current drivers: monitor mode flag method to that sets the mode In the second link, you can see that monitor mode flag is not ...


14

Yes, custom recovery works with encrypted honeycomb device. The built-in encryption doesn't touch ROM & firmware at all. It just encrypts accounts, settings, downloaded apps & their data etc. which can be located on phone memory, internal SD or external SD. That's why encryption is no longer present after factory reset because there's no encrypted ...


12

There is nothing available. While it is theoretically possible with the hardware, in practice it would be very difficult to implement and would probably need a custom ROM that supported it. Even the tools for doing this on a desktop (Aircrack, etc.) generally require specific wireless chipsets and drivers to do wireless packet capture. EDIT: There's now a ...


12

Note: answering my own question as nobody knew. I did a packet capture after selecting Menu -> Accounts & Sync -> Auto-sync (also accessible via the "Power Control" widget). What did I discover? To my horror (http requests from phone displayed below): GET /proxy/calendar/feeds/myaccount%40gmail.com HTTP/1.1 Accept-Encoding: gzip Authorization: ...


11

On my encrypted Nexus S I use a temporary tmpfs mount on /sdcard in CWM. It has enough RAM to hold the new ROM in memory during the update: Download your ROM to /tmp/update.zip and boot into recovery. Then log in via 'adb shell': ## on the host machine do: me@workstation:/tmp$ adb shell ## now on the device in 'adb shell' mode... ~ # mount -t tmpfs none /...


10

A lot of people are asking that question. Here's one. Some people are offering bounties. Like at XDA-Developers. Some people have suggested alternatives. AxCrypt looks like an alternative, and there's an alpha product that works with it (and Dropbox) called BoxCryptor. But I've not found an actual port of Truecrypt to Android, nor any information about ...


10

Google has no idea what the encryption key for your device is. The entire process takes place on your device and the key is never transmitted anywhere. The key itself is also not stored in plaintext on your device: Storing the encrypted key The encrypted key is stored in the crypto metadata. Hardware backing is implemented by using Trusted ...


9

The current encryption scheme is outlined on the Android website's "Notes on the implementation of encryption in Android 3.0" page. From that page, the specific algorithm used is noted as such: The actual encryption used for the filesystem for first release is 128 AES with CBC and ESSIV:SHA256 That's the only official documentation I've seen for it ...


9

Your encryption password is the same as the pattern/PIN/password you use to lock your screen. So simply go to Settings > Security > Screen lock and change it. Note that when you do this Android will ask you whether to also enter the pattern/PIN/password when you start the device in order to make your encrypted device's data unreadable without it. In Android ...


8

Yes with an app called redphone: http://www.appbrain.com/app/redphone-beta/org.thoughtcrime.redphone


8

I'm using Samsung Galaxy Note Android 4.0.3. and I've tried Encrypting and Decrypting several times successfully.


8

In Honeycomb the option is in Settings -> Location and security. In Ice Cream Sandwich it's at Settings -> Personal -> Security -> Encryption. If you're wondering about how Android does encryption, take a look at this: http://source.android.com/tech/encryption/android_crypto_implementation.html Naturally encrypting and decrypting requires some ...


8

There are many available choices, depending on the features you need: Cryptonite uses EncFS and requires root LUKS also requires root and provides on-the-fly encryption (AES by default) to virtual folders Eds provides encrypted containers and does not require root. It even is compatible to TrueCrypt. DroidCrypt can encrypt single files or full directories. ...


8

Yes, 3G traffic will go through your VPN if it's set up correctly. Whether or not your service provider supports that is another matter; some block VPN traffic (such as Verizon - see this thread).


7

I sent this question into Verizon Wireless as well. Here is their reply: Thank you for contacting Verizon Wireless through our website...I understand that you've been having an issue trying to decrypt files on your handset. At this time Motorola hasn't provided an update for your phone to be able to do this. Without that, we're unable to ...


6

As far as I know, this is simply a bug in the HTC email application. You can try using a different client (K9 supports signed messages, I believe), but beyond that you'll have to take it up with HTC and hope that they decide to fix it at some point. Here's a related XDA thread where someone includes what he says is a response from HTC regarding the issue. ...


6

Encryption is a fairly CPU intensive process, so using more battery is not unexpected. Though it depends a lot upon the apps you use and how much they read/write to the storage. I would expect that an 'idle' Xoom with encryption would last just as long as one without, but if you use an app that does lots of little writes to disk, it will end up using more ...


6

Reposting answer for future people! Naturally, I figured it out 10 minutes after posting. Can't answer for another few hours because I'm a new user. Under the security section of the settings, there is a Device Administrator page. I deactivated the "Email" app as an admin. It warned that it would delete all my mail and stuff and I accepted. No factory ...


6

Goggle Drive gives you some security options regarding your documents: You can choose to encrypt all offline documents (that is, documents stored on your device); And can also choose to decrypt documents incrementally as they are streamed to your phone, by selecting the Streaming Decryption, thus having just a small portion of the document decrypted when ...


6

Android provides the capability to do filesystem encryption, but it's up to the vendor who builds the firmware for your device to enable it for the SD card. I have only seen a few devices with this capability enabled for the SD card, though most seem to have it for the internal storage (/data). Typically if it's enabled, there will be a menu item in the ...


6

I have the same problem when sending encrypted mails from my Apple Mail client with GPGMail2 plug-in. Apparently K9-Mail supports only PGP/Inline and not PGP/MIME which seems to be the standard formatting PGP-Emails today. If you like to test it on your own, configure GPGMail to use inline mode through your Terminal: defaults write org.gpgtools.gpgmail ...


6

There are low(er)-level commands that can be used in a shell to encrypt your user data partition. Disclaimer/Warning: the following instructions will wipe your data, ensure that you make a backup if needed. Following these steps, you should be able to wipe your data partition and have it encrypted afterwards (similar to a factory reset): Boot your phone ...


5

You mean like WhisperCore? Quoting from it's site: By default, WhisperCore encrypts your entire data partition at the device level, and can optionally be enabled for your phone's SD card as well. WhisperCore also includes smudge-resistant screen unlock patterns. Unfortunately it only currently runs on the Nexus handsets.


5

It seems to be a general problem. I was trying this on my Asus Eee Pad with physical keyboard which actually allows to minimize the "encryption process" and go to settings. However checking running processes doesn't show any activity that would suggest that something is actually happening.


5

The setting that you're talking about is in effect the --redirect-gateway option of OpenVPN and is documented on the OpenVPN man page --redirect-gateway Automatically execute routing commands to cause all outgoing IP traffic to be redirected over the VPN. This option performs three steps: Create a static route for the --remote ...


5

I know nothing about Android development, so keep that in mind. Following various instructions online, however, I was able to build the source and put it on my phone. Perhaps someone who knows what they’re doing can come along and explain how it really should be done. Until then… Install and configure the Android SDK. Make sure you add the SDK tools to ...


5

Encryption is done on the /data partition (where all app-data is stored). However, /sdcard is sometimes encrypted too (if the sdcard is actually internal memory of the phone i.e. not removable). If the sdcard is also encrypted,then you will be unable to flash ROM's from within Recovery (recovery can't read encrypted sdcard).


5

Master reset with hardware keys Turn Off the Device Press and Hold the Volume Up, Home, and Power Button When the phone vibrates release the Power Button, but continue to hold the other two When you see the system recovery screen release the other two buttons Using the Volume down, select "Wipe data / Factory reset" Press Power Button to select it When the ...


5

For me, the original answer did not work as expected. It looked like it encrypted successfully, but the UI came back very quickly and the "Encryption" setting did not show that the devices was encrypted. I then applied the commands given in the update, but it still didn't work. I then reduced the size of the data partition and it encrypted successfully. ...



Only top voted, non community-wiki answers of a minimum length are eligible