Android Question How protection api key in app

[Pooya1]

Hello
My app connect to api for give my product and show their
I need send api key to api in each request
I used sign key "Certificate fingerprints hash" for api key (exist in signature section)
But i search about sign key in google and i understood that hacker can get sign key information
So How do i can protect api key looklike other apps in Google Store?

Thanks Dige

 

[lemonisdead]

If you can rely on an external server you could encrypt/decrypt the key received from a server ; using your own complex algorithm. Or you could take a look at Informatix Pro Bundle which contains a steganography library.

 

[Pooya1]

If you can rely on an external server you could encrypt/decrypt the key received from a server ; using your own complex algorithm. Or you could take a look at Informatix Pro Bundle which contains a steganography library.

Yes i encrypt it in server and get it in app
But for decrypt it,i have to use key for decrypt and i cannot set key in source
How do steganography library working? if it is good so i buy it

 

[DonManfred]

How do steganography library working?

Maybe this helps here
F5Steg

Author: F. Leneuf-Magaud/Informatix
Version: 1.2

• F5Steg
  
  • Events:
    • ArrayExtracted (SecretMessage() As Byte)
    • Embedded (OutFileName As String)
    • StringExtracted (SecretMessage As String)
  • Functions:
    • EmbedArray (InFileName As String, OutFileName As String, SecretMessage As Byte(), JpgQuality As Int, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the application signature and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • EmbedArray2 (InFileName As String, OutFileName As String, SecretMessage As Byte(), JpgQuality As Int, Password As String, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the specified password and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • EmbedString (InFileName As String, OutFileName As String, SecretMessage As String, JpgQuality As Int, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the application signature and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • EmbedString2 (InFileName As String, OutFileName As String, SecretMessage As String, JpgQuality As Int, Password As String, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the specified password and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • ExtractToArray (FileName As String, EventPrefix As String)
      Extracts and decrypts the array of bytes hidden in the given JPEG file with the application signature.
      When done, an ArrayExtracted event is raised.
    • ExtractToArray2 (FileName As String, Password As String, EventPrefix As String)
      Extracts and decrypts the array of bytes hidden in the given JPEG file with the specified password.
      When done, an ArrayExtracted event is raised.
    • ExtractToString (FileName As String, EventPrefix As String)
      Extracts and decrypts the string hidden in the given JPEG file with the application signature.
      When done, a StringExtracted event is raised.
    • ExtractToString2 (FileName As String, Password As String, EventPrefix As String)
      Extracts and decrypts the string hidden in the given JPEG file with the specified password.
      When done, a StringExtracted event is raised.

 

[Pooya1]

Maybe this helps here
F5Steg

Author: F. Leneuf-Magaud/Informatix
Version: 1.2

• F5Steg
  • Events:
    • ArrayExtracted (SecretMessage() As Byte)
    • Embedded (OutFileName As String)
    • StringExtracted (SecretMessage As String)
  • Functions:
    • EmbedArray (InFileName As String, OutFileName As String, SecretMessage As Byte(), JpgQuality As Int, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the application signature and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • EmbedArray2 (InFileName As String, OutFileName As String, SecretMessage As Byte(), JpgQuality As Int, Password As String, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the specified password and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • EmbedString (InFileName As String, OutFileName As String, SecretMessage As String, JpgQuality As Int, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the application signature and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • EmbedString2 (InFileName As String, OutFileName As String, SecretMessage As String, JpgQuality As Int, Password As String, EventPrefix As String)
      Encrypts and hides the specified secret message in the given image (bmp, png or jpg).
      The encryption is done with the specified password and the resulting image is a JPEG file.
      When done, an Embedded event is raised.
    • ExtractToArray (FileName As String, EventPrefix As String)
      Extracts and decrypts the array of bytes hidden in the given JPEG file with the application signature.
      When done, an ArrayExtracted event is raised.
    • ExtractToArray2 (FileName As String, Password As String, EventPrefix As String)
      Extracts and decrypts the array of bytes hidden in the given JPEG file with the specified password.
      When done, an ArrayExtracted event is raised.
    • ExtractToString (FileName As String, EventPrefix As String)
      Extracts and decrypts the string hidden in the given JPEG file with the application signature.
      When done, a StringExtracted event is raised.
    • ExtractToString2 (FileName As String, Password As String, EventPrefix As String)
      Extracts and decrypts the string hidden in the given JPEG file with the specified password.
      When done, a StringExtracted event is raised.

Oh my god it is very professional
I see application signature in your library for encryption
I understand that application signature maybe hacked,isn't it?
And do you have sample in your bundle if i buy it?

 

[DonManfred]

It is NOT my bundle! The library is from @Informatix

But there is an example project inside the Bundle to show the Features.

 

[Pooya1]

It is NOT my bundle! The library is from @Informatix

But there is an example project inside the Bundle to show the Features.

Oh sorry
Do you know that application signature be hack or not?