108 lines
4.1 KiB
Java
108 lines
4.1 KiB
Java
|
package com.cescit.integrity;
|
|||
|
|
|
|||
|
|
import android.content.Context;
|
|||
|
|
import android.content.pm.PackageInfo;
|
|||
|
|
import android.content.pm.PackageManager;
|
|||
|
|
import android.content.pm.Signature;
|
|||
|
|
|
|||
|
|
import com.mabeijianxi.smallvideorecord2.Log;
|
|||
|
|
|
|||
|
|
import org.json.JSONObject;
|
|||
|
|
|
|||
|
|
import java.io.File;
|
|||
|
|
import java.io.FileInputStream;
|
|||
|
|
import java.io.IOException;
|
|||
|
|
import java.io.InputStream;
|
|||
|
|
import java.nio.charset.StandardCharsets;
|
|||
|
|
import java.security.MessageDigest;
|
|||
|
|
import java.security.NoSuchAlgorithmException;
|
|||
|
|
import java.util.Collections;
|
|||
|
|
import java.util.HashMap;
|
|||
|
|
import java.util.Map;
|
|||
|
|
|
|||
|
|
// apk完整性检验
|
|||
|
|
class BaseIntegrity {
|
|||
|
|
|
|||
|
|
private static final String MESSAGE_DIGEST_ALGORITHM = "SHA-256";
|
|||
|
|
|
|||
|
|
// Collections.unmodifiableMap 使得返回的内容只能只读访问
|
|||
|
|
private static final Map<String, String> hashList = Collections.unmodifiableMap(
|
|||
|
|
new HashMap<String, String>()
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
public static JSONObject check(Context context) throws Exception {
|
|||
|
|
JSONObject result = new JSONObject();
|
|||
|
|
Map<String, String> nowHashList = getHashMap(context);
|
|||
|
|
|
|||
|
|
// String ret = HttpUtil.getHttpRequestData((String) Config.getConfig(context,"APK_HASH_URL"),Config.getHeader(context));
|
|||
|
|
// JSONObject obj = new JSONObject(ret);
|
|||
|
|
// String upHash = obj.getString("apk");
|
|||
|
|
String upHash = Config.getConfig(context,"APK_HASH_KEY");
|
|||
|
|
String nowHash = nowHashList.get("apk");
|
|||
|
|
if (upHash==null || upHash.isEmpty() || !upHash.equals(nowHash)) {
|
|||
|
|
throw new Exception("Content of APK has been tampered");
|
|||
|
|
}
|
|||
|
|
result.put("res conunt", hashList.size());
|
|||
|
|
return result;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// // 获取文件对应的hash值
|
|||
|
|
// public static Map getHashMap(Context context) throws Exception{
|
|||
|
|
// File file = new File(context.getPackageCodePath());
|
|||
|
|
// InputStream fis = new FileInputStream(file);
|
|||
|
|
// String fileHash = getFileHash(fis);
|
|||
|
|
// // res资源（路径：文件hash）键值对
|
|||
|
|
// Map<String, String> nowHashList = new HashMap<String,String>();
|
|||
|
|
// Log.d(BaseIntegrity.class.getName(),"file hash: "+fileHash);
|
|||
|
|
// nowHashList.put("apk", fileHash);
|
|||
|
|
// return nowHashList;
|
|||
|
|
// }
|
|||
|
|
|
|||
|
|
// 获取Res文件对应的hash值构造的String
|
|||
|
|
public static String getHashString(Context context) throws Exception{
|
|||
|
|
Map<String, String> nowHashList = getHashMap(context);
|
|||
|
|
String str = "";
|
|||
|
|
// 遍历对比文件hash
|
|||
|
|
for (Map.Entry<String, String> entry : nowHashList.entrySet()) {
|
|||
|
|
String fileName = entry.getKey();
|
|||
|
|
String presetHash = entry.getValue();
|
|||
|
|
if (!presetHash.equals("")) {
|
|||
|
|
str += "put(\"" + fileName + "\", \"" + presetHash + "\");";
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
// 用默认字符编码解码字符串。
|
|||
|
|
byte[] bs = str.getBytes();
|
|||
|
|
str = new String(bs, StandardCharsets.UTF_8);
|
|||
|
|
return str;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static Map<String, String> getHashMap(Context context) {
|
|||
|
|
PackageManager manager = context.getPackageManager();
|
|||
|
|
String pkgname = context.getPackageName();
|
|||
|
|
PackageInfo packageInfo = null;
|
|||
|
|
Map<String, String> nowHashList = new HashMap<String,String>();
|
|||
|
|
try {
|
|||
|
|
packageInfo = manager.getPackageInfo(pkgname, PackageManager.GET_SIGNATURES);
|
|||
|
|
Signature[] signatures = packageInfo.signatures;
|
|||
|
|
Signature sign = signatures[0];
|
|||
|
|
byte[] signByte = sign.toByteArray();
|
|||
|
|
nowHashList.put("apk", getHash(signByte));
|
|||
|
|
} catch (PackageManager.NameNotFoundException | IOException | NoSuchAlgorithmException e) {
|
|||
|
|
}
|
|||
|
|
return nowHashList;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private static String getHash(byte[] bytes) throws IOException, NoSuchAlgorithmException {
|
|||
|
|
byte[] buffer = new byte[1024]; // The buffer to read the file
|
|||
|
|
MessageDigest digest = MessageDigest.getInstance(MESSAGE_DIGEST_ALGORITHM);
|
|||
|
|
int numRead = 0; // Record how many bytes have been read
|
|||
|
|
digest.digest(bytes);
|
|||
|
|
byte [] sha1Bytes = digest.digest();
|
|||
|
|
StringBuffer hexString = new StringBuffer();
|
|||
|
|
for (int i = 0; i < sha1Bytes.length; i++) {
|
|||
|
|
hexString.append(Integer.toString(( sha1Bytes[i] & 0xff) + 0x100, 16).substring(1));
|
|||
|
|
}
|
|||
|
|
return new String(hexString);
|
|||
|
|
}
|
|||
|
|
}
|