klaxit / hidden-secrets-gradle-plugin

🔒 Deeply hide secrets on Android
MIT License
395 stars 40 forks source link

Use SHA256 bytes without translating to string #60

Open DawnStream opened 2 years ago

DawnStream commented 2 years ago

Current implementation translate the bytes into string , which limits the actual bytes used for XOR'ing and misses the high entropy characteristics of the SHA256 function (as the string will only be constructed of 1-0, a-f). This PR removes the translation to string in both creating the Kotlin code generating the obfuscated key and the C++ code that decode it