bdrister/AquaticPrime

A public key is not as well hidden as it should be

Closed this issue · 1 comments

well

There is, probably, a better way to «make it harder to replace public key» then placing CFStringAppend(…) function calls one just by one. Try mixing it with other pointless stuff:

    // - (void)populateKeyView
    [pubConstruct appendString: [NSString stringWithFormat:@"\tCFStringAppend(key, CFSTR(\"%@\"));\n", …    
    [pubConstruct appendString:  /* any meaningless code goes here */ ];
    [pubConstruct appendString: [NSString stringWithFormat:@"\tCFStringAppend(key, CFSTR(\"%@\"));\n", …     
    [pubConstruct appendString:  /* another bit of trash code*/ ]; 

The code in the repo is certainly considered the bare minimum for hiding it and are more meant as a reminder that it's necessary. However, any attempt at obfuscation in a well-visible source tree like this is pretty obvious, so the more sophisticated tricks for doing this kind of thing pretty much have to be learned from someplace less public to have any value.