Безопасность Android: как проверить, не запутываются ли строковые константы C++ при использовании ProGuard и DexGuard? ⇐ C++

[Anonymous]

Context: We are putting some keys that does not expect any future changes or updates unless got compromise, originally these keys are in the server side but for this specific project we will not rely from REST API. We decided to put these keys in C++ and consuming it using JNI.

Currently we are now trying to decompile the APKs

• Debug/Release with ProGuard
• Debug/Release with DexGuard + ProGuard
• Debug/Release without obfuscation tool

Our question is where to locate and verify if the string constants in the C++ code is properly obfuscated, some says it can be found in .so files but cannot find it in the decompiled APK using JADX.


Источник: https://stackoverflow.com/questions/780 ... when-using