Skip to main content

By clicking Submit, you agree to the developerWorks terms of use.

The first time you sign into developerWorks, a profile is created for you. Select information in your developerWorks profile is displayed to the public, but you may edit the information at any time. Your first name, last name (unless you choose to hide them), and display name will accompany the content that you post.

All information submitted is secure.

  • Close [x]

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

By clicking Submit, you agree to the developerWorks terms of use.

All information submitted is secure.

  • Close [x]

Encrypt data within mobile apps

John Muchow, Author
John Muchow, an independent J2ME consultant, developer, and technical writer, is the author of Core J2ME Technology and MIDP. John is also one of several Subject Matter Experts who designed and developed Sun Microsystems' newest certification exam Sun Certified Mobile Application Developer (SCMAD) for J2ME. Visit Core J2ME for additional source code, articles, developer resources, and to learn more about the SCMAD certification exam. Always on the lookout for interesting J2ME projects (writing, consulting, training, or permanent opportunities), John welcomes your e-mail.

Summary:  This tutorial provides an overview of how to encrypt application-related data in a Java 2 Micro Edition (J2ME) application (MIDlet).

Date:  03 Feb 2004
Level:  Introductory PDF:  A4 and Letter (536 KB | 31 pages)Get Adobe® Reader®

Activity:  6797 views
Comments:  

Before you start

About this tutorial

With the ever present concern over security, software applications must consider how to secure confidential data. A mobile application is not immune from privacy concerns. In fact, mobile devices and their software applications have special considerations given that most people carry these devices wherever they go.

This tutorial provides an overview of how to encrypt application-related data in a Java 2 Micro Edition (J2ME) application (MIDlet). The tutorial begins with a brief introduction to data encryption. As encryption is not a topic for the faint of heart, this section is rather brief, and focuses specifically on the open source encryption API written by the Legion of Bouncy Castle. The topic concludes by developing a MIDlet to demonstrate encrypting and decrypting of text strings.

One problem inherent to most mobile devices is the limited amount of memory. Although Bouncy Castle and other encryption libraries offer an abundance of functionality, there is a price. As with most any library you use, only a small portion of the code is typically needed by your application. One common way to eliminate unused code, and at the same time make it more challenging to reverse engineer an application, is to use a Java obfuscator. I'll introduce the open source obfuscator, ProGuard. This addresses everything from downloading and installing, to configuring the J2ME Wireless Toolkit to use ProGuard. The final section in this tutorial compares MIDlet JAR file sizes, with and without obfuscation.


Prerequisites

To run the samples in this tutorial, you'll need the following software tools:

  • The Java Development Kit (JDK)
  • The Wireless Toolkit (WTK)
  • Bouncy Castle
  • ProGuard

See Software prerequisites for information on downloading, installing, and configuring these software tools.

1 of 9 | Next

Comments



Help: Update or add to My dW interests

What's this?

This little timesaver lets you update your My developerWorks profile with just one click! The general subject of this content (AIX and UNIX, Information Management, Lotus, Rational, Tivoli, WebSphere, Java, Linux, Open source, SOA and Web services, Web development, or XML) will be added to the interests section of your profile, if it's not there already. You only need to be logged in to My developerWorks.

And what's the point of adding your interests to your profile? That's how you find other users with the same interests as yours, and see what they're reading and contributing to the community. Your interests also help us recommend relevant developerWorks content to you.

View your My developerWorks profile

Return from help

Help: Remove from My dW interests

What's this?

Removing this interest does not alter your profile, but rather removes this piece of content from a list of all content for which you've indicated interest. In a future enhancement to My developerWorks, you'll be able to see a record of that content.

View your My developerWorks profile

Return from help

static.content.url=http://www.ibm.com/developerworks/js/artrating/
SITE_ID=1
Zone=Java technology
ArticleID=136618
TutorialTitle=Encrypt data within mobile apps
publish-date=02032004
author1-email=
author1-email-cc=

Tags

Help
Use the search field to find all types of content in My developerWorks with that tag.

Use the slider bar to see more or fewer tags.

Popular tags shows the top tags for this particular content zone (for example, Java technology, Linux, WebSphere).

My tags shows your tags for this particular content zone (for example, Java technology, Linux, WebSphere).

Use the search field to find all types of content in My developerWorks with that tag. Popular tags shows the top tags for this particular content zone (for example, Java technology, Linux, WebSphere). My tags shows your tags for this particular content zone (for example, Java technology, Linux, WebSphere).