Add Google Tink dependency, replacing androidx.security.crypto

[jmartinesp]

Content

• Remove the deprecated androidx.security.crypto library.
• Replace it with a simplified but backwards compatible implementation using Tink. There are some constants that are now hardcoded, but those were previously in the replaced library and accessible to anyone, so it shouldn't be a security concern.

Motivation and context

The library is being deprecated and was causing some conflicts related to it using an outdated Tink version. Maybe @BillCarsonFr should also take a quick look?

Tests

Start the app with a logged in account, if it works fine the replacement works.

Tested devices

• Physical
• Emulator
• OS version(s): 14

Checklist

• Changes have been tested on an Android device or Android emulator with API 24
• UI change has been tested on both light and dark themes
• Accessibility has been taken into account. See https://github.com/element-hq/element-x-android/blob/develop/CONTRIBUTING.md#accessibility
• Pull request is based on the develop branch
• Pull request title will be used in the release note, it clearly define what will change for the user
• Pull request includes screenshots or videos if containing UI changes
• You've made a self review of your PR

[github-actions]

📱 Scan the QR code below to install the build (arm64 only) for this PR.

If you can't scan the QR code you can install the build via this link: https://i.diawi.com/CxKnVW

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 44 lines in your changes missing coverage. Please review.

Project coverage is 80.05%. Comparing base (3ca6246) to head (bf8b747).
Report is 21 commits behind head on develop.

Files with missing lines	Patch %	Lines
...lin/io/element/encrypteddb/crypto/EncryptedFile.kt	0.00%	21 Missing ⚠️
...ent/encrypteddb/crypto/EncryptedFileInputStream.kt	0.00%	15 Missing ⚠️
...nt/encrypteddb/crypto/EncryptedFileOutputStream.kt	0.00%	7 Missing ⚠️
...teddb/passphrase/RandomSecretPassphraseProvider.kt	0.00%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff             @@
##           develop    #4405      +/-   ##
===========================================
- Coverage    80.10%   80.05%   -0.05%     
===========================================
  Files         2063     2065       +2     
  Lines        55180    55212      +32     
  Branches      6765     6765              
===========================================
  Hits         44201    44201              
- Misses        8664     8696      +32     
  Partials      2315     2315              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[ganfra]

Can you extract those constants?
I don't really like to have to use all those androidx constants by default :/

[jmartinesp]

It's not great, but using our own constants means adding a migration system for somethings that's not supposed to change ever (unless we wanted to change something like the encryption scheme 😓 ).

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud