sromku/android-simple-storage — pull request #1 by sohaibshaheen (2014-01-29 21:18:23+00:00)
Title: Security Patch for weak Key Derivation - Urgent

The current system generates weak keys which are susceptible to Brute
force attack. Since the key derivation just hashes the user provided
password, it can be brute forced using Rainbow tables i.e. precomputed
hashes for well known passwords.

The changes introduced, follow PKCS#5 standard. In it we use pseudo
random salt and 1000 iterations to initialize key factory which
generates our key, which is much more random and difficult to predict
or crack.

Number of iterations can be increased to enhance security further.