print-apk-signature

Summary:

Command-line shell script to print the signature of a signed Android APK (Application Package Kit) file.

Usage:

print-apk-signature "/path/to/file.apk"

• prints a lot of information about the signature
• this information includes (amongst other things):
  • fingerprints of the public key, as generated by the following cryptographic hash algorithms:
  • MD5
  • SHA-1
  • SHA-256

print-apk-signature "/path/to/file.apk" <fingerprint_hash_algorithm>

• prints only the fingerprint of the public key, as generated by the specified cryptographic hash algorithm
  • <fingerprint_hash_algorithm> must match one of the following values:
  • MD5
  • SHA-1
  • SHA-256

compare-apk-signatures "/path/to/file_1.apk" "/path/to/file_2.apk"

• determines the SHA-1 fingerprint for each of the two input APK files
• compares these two fingerprint values
• prints either:
  • EQUAL
  • NOT EQUAL

Dependencies:

• external:

  • Java Standard-Edition Runtime-Environment

• internal

  • apksigner

Legal:

• copyright: Warren Bank

• license: GPL-2.0

• ---

Related Documentation and Articles:

• Application Signing: general overview

• JAR-signed APK Verification Scheme v1

• APK Signature Scheme v2

  • additional information in the Android Developers Blog

• APK Signature Scheme v3

  • less technical summary in an article on XDA