Google Play reporting "Unsafe cipher mode" for StorageHelper.java

Issue

Our android app is receiving this error in our Google Play pre-launch report :

Your app contains a less secure encryption mode:
 * com.microsoft.identity.common.adal.internal.cache.StorageHelper->getKeyThumbPrint

Proposed Solution

To resolved the error. The report suggests changing from existing cyber algorithm from:

private static final String CIPHER_ALGORITHM_FOR_KEY_TRACKING = "AES/ECB/PKCS5Padding";

to

private static final String CIPHER_ALGORITHM_FOR_KEY_TRACKING = "AES/GCM/NoPadding";

as described in this linked faq

Affected Lib Versions

We have been getting the same error for apps using MSAL releases 2.2.1 and 2.1.0.

[Digipom]

Just commenting that the issue is still present in version 2.2.2. I’m receiving this warning as well.

[AdamBJohnsonx]

This is mostly a spurious warning, and it is unfortunate that it is being applied in this manner. The cipher mode in question isn’t actually being used for encryption, but as a seed to a hash function for the purpose of tracking when users reset keys using deprecated apis. I think we’re removing this completely in the next release in favor of a different mechanism.