Android and iOS

Cryptographic agility and data formats

Key lifecycles, signatures, encryption and application data.

Keys and cryptography1 min readEditorial methods

Future algorithm or policy changes require prepared formats. Flexibility must not allow clients to choose arbitrary weak methods.

Evaluation approach

Restrict versions through trusted policy and define old-data reading and migration.

Application example

An upgrade may read old documents while writing the new format. Test interrupted migration.

Limits and considerations

Keeping weak options forever under compatibility claims leaves migration unfinished.

Who retires the old option?

Assign an owner and completion criteria. Measure old-format use and recovery needs rather than indefinitely retaining obsolete support without a decision.

Checks and decisions

  • Version formats
  • Measure migration
  • Retire old support

Sources

The primary references above provide the technical basis. Example workflows and evaluation suggestions are this publication’s explanations, not independent test results for a particular product.