AES-GCM (Android API Level <= 19)

Affected Versions: Tink Android, All Versions
Affected Key Types: AES-GCM

Description

On Android KitKat (API level 19) without Google Play Services, AES-GCM does not work properly. This is because KitKat uses Bouncy Castle 1.48 which does not support updateAAD.

If Google Play Services is present, AES-GCM should work well.

If you want to support all Android versions without depending on Google Play Services, use CHACHA20-POLY1305, AES-EAX, or AES-CTR-HMAC-AEAD for your AEAD.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2023-07-11 UTC.