-
-
[原创]关于apk程序的签名验证
-
发表于: 2014-8-25 14:28 4310
-
最近在进行apk程序的签名验证探索,通过如下代码获得了一串hashcode如下:
308201e53082014ea003020102020453996067300d06092a864886f70d01010505003037310b30090603550406130255533110300e060355040a1307416e64726f6964311630140603550403130d416e64726f6964204465627567301e170d3134303631323038313031355a170d3434303630343038313031355a3037310b30090603550406130255533110300e060355040a1307416e64726f6964311630140603550403130d416e64726f696420446562756730819f300d06092a864886f70d010101050003818d0030818902818100c8e51fef29a692d11445e291472ffe3f95d205da61db8908af6e858fe207e89cea9834e65de131a89eb60a09abad8ae45275c0782935b31c6d04007833212bc029f77c15c6d1179de532f44f49f4444601cf1ad14ee032982710ec0d0c1a0043477ba579352ee7d11fc4174681351100b22d06598386fff566c494f0679019f90203010001300d06092a864886f70d010105050003818100c2c280f6cc86353d86ae9e2b27555d5fc311691a2e5d723b529a4ef6cc2bd1554501fc0c9def083fa319236fd53d2251869ba05113a0850b452427072dd52f4f4044c2c1a0385e898931bc9cdc1186736b9e1bc734885d2ff67647804f473b0a55e4815f048c7e303765deadb937f09c02cfe59d3ff75e4756a5e9ea26f32d1b。
紧接着通过:C:\test>keytool -printcert -file CERT.RSA
所有者:CN=mao
签发人:CN=mao
序列号:53f5b042
有效期: Thu Aug 21 16:39:30 CST 2014 至Mon Aug 15 16:39:30 CST 2039
证书指纹:
MD5:AC:30:6C:00:45:7F:73:82:FA:FC:C4:89:15:B7:01:D8
SHA1:15:1A:EE:ED:4B:AA:59:01:64:6C:6E:20:BD:2F:9E:45:58:F1:FB:72
签名算法名称:SHA1withRSA
版本: 3
实在不明白前面获得的一大串hashcode和后面获得的md5和 sha1有啥区别,如果自己的apk做签名验证,用什么进行比对比较好?请高手指教,呵呵
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。
紧接着通过:C:\test>keytool -printcert -file CERT.RSA
所有者:CN=mao
签发人:CN=mao
序列号:53f5b042
有效期: Thu Aug 21 16:39:30 CST 2014 至Mon Aug 15 16:39:30 CST 2039
证书指纹:
MD5:AC:30:6C:00:45:7F:73:82:FA:FC:C4:89:15:B7:01:D8
SHA1:15:1A:EE:ED:4B:AA:59:01:64:6C:6E:20:BD:2F:9E:45:58:F1:FB:72
签名算法名称:SHA1withRSA
版本: 3
实在不明白前面获得的一大串hashcode和后面获得的md5和 sha1有啥区别,如果自己的apk做签名验证,用什么进行比对比较好?请高手指教,呵呵
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入!
赞赏
他的文章
看原图
赞赏
雪币:
留言: