Repository files navigation

A quick demo to show several ways of hiding secrets in a mobile app, like in:

• source code
• manifest file
• gradle file
• JNI/NDK

To set the API key forGRADLE_ENV_API_KEY:

$export GRADLE_ENV_API_KEY=$(echo"api-key-for-gradle-file-from-env"| openssl dgst -binary -sha256| openssl enc -base64)$echo$GRADLE_ENV_API_KEYsrqGFqMm23R6A7YJbAEmKRuSQ6TWnLq3YNtAWbEoSuE=

To set the API key forJNI_API_KEY:

$  cp -v app/src/main/cpp/api_key.h.example app/src/main/cpp/api_key.h'app/src/main/cpp/api_key.h.example' ->'app/src/main/cpp/api_key.h'

Now edit the fileapp/src/main/cpp/api_key.h and look for the palce holderANDROID_HIDE_SECRETS_API_KEY_H and replace its dummy valueplace-the-api-key-here with your desired API key, maybe like:

echo"api-key-for-the-jni-file"| openssl dgst -binary -sha256| openssl enc -base64yDbx5R+a6zJ3H76iU9YB9U0GY6DjZ4FiWFb8vCMCdLg=

Just start your Android Studio and build and run this project as usual for anyother mobile app.

The app is a dummy one that only shows in the main screen all API keys hidden inthe code, just to prove that we can retrieve them.