On Oct 8, 12:21 pm, Mark Murphy <mmur...@commonsware.com> wrote:

> What CRC32 checksum?
>
> Trevor Johns, in a discussion of LVL, offered up CRC32 as a means of
> helping detect tampering, but that was simply an example. Otherwise, I
> am coming up with zero references to the use of CRC32 with respect to
> APKs.

Note that JonFHancock also mentions using CRC32:

On Oct 8, 7:38 am, JonFHancock <jonfhanc...@gmail.com> wrote:

> However, I also log a the CRC32 of the current app with each api
> call.  If I see a particular CRC32 that I know I didn't sign, I can
> block its api access selectively.

I think this is who DanH is addressing... saying JonFHancock really
should be using a cryptographically secure checksum algo if he's going
to take this approach.

String

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to