B4J Question [SOLVED] Obfuscating of library methods

[JackKirk]

This question has relevance across B4J and B4A.

I am doing some security enhancements for some apps that use B4J libraries.

One of the things I am doing is reading some hex strings from a file, converting to bytes then decrypting.

I compile the app with obfuscation then use a java decompiler to look at the resulting .jar

The trouble is that, when using the java decompiler, if I search for "Decrypt" (a method in the jB4XEncryption library) it pops up large as life - pointing to the (obfuscated) variable that is the encryption key.

If I could obfuscate "Decrypt" it would make it considerably harder for a hacker.

I am not adverse to modifying the jB4XEncryption library if necessary - if I knew how.

Any suggestions?

Thanks in anticipation...

 

[JackKirk]

I have worked out a way to do this with Don Manfred's help, see:

https://www.b4x.com/android/forum/t...n-a-jar-without-a-wrapper.110453/#post-689424

 

[MathiasM]

Wait, you store the encryption key inside your code and are trying to hide it?
This won't work at all. There is no way this would even hold back a script kiddie.

I think there more of design flaw here.

 

[JackKirk]

Wait, you store the encryption key inside your code and are trying to hide it?
This won't work at all. There is no way this would even hold back a script kiddie.

I think there more of design flaw here.

I have sent you a PM.