The Research On Android White-Box Cryptography

In recent years, Android, one of the smart phone operating systems, develops rapidly. However, with the development of operation system, it also attracts hackers attention. Users with Android always face the problems such as losing personal information, software copyright and being attacked by Malicious code. Android system always use cryptographic algorithm like AES,3DES to protect the information of users. But if attackers take control of the cryptographic algorithm, this cryptographic algorithm cannot protect user's information. Thus, the cryptographic of Android intelligent terminal is a focus hotspot.Compared with PC, Android system configuration is poor and its technology is not mature. It makes Android system face more risks. The complicated and volatile attack context brings more hazards. For example, attackers can get user 's input and output in White-Box attack context. They also can take control of this cryptographic algorithm and tamper this cryptographic algorithm. Now we choose White-Box Cryptography proposed by C how to solve this problem. White-Box Cryptography can resist White-Box attack and it succeeds in PC. So we can take this cryptographic algorithm to Android system. We get over the difficulties when takeing it to Android.Finally we succeed in taking White-Box Cryptography to Android system. We put this more effective encryption into Android system and it will solve the security problems of Android.In this paper, we first introduce the knowledge of Android system and the crisis of Android security. And then we describe White-Box attack context, Black-Box Cryptography and Gray-Box Cryptography. Next, we get an idea that we can take White-Box Cryptography to Android system, considering of the feature of White-Box attack context. In addtiong, we introduce the implemention of White-Box Cryptography and analyze feasibility of Android White-Box Cryptography. And then we take the advantages of White-Box Cryptography into consideration.We design the White-Box Cryptography and implement its function by analyzing the theory. And then we test it and verify its reliability and feasibility on Android system. At last, we apply this White-Box Cryptography to Android E- mail system and for protection.After implementing this encryption software and analyzing its security, Android White-Box Cryptography can protect user's personal information effectively and it has practical and market value.The fact proved that White-Box Cryptography on Android can protect users' information. However, it has some disadvantages. Because of the difference of Android smart phones' configuration, some smart phones with low configuration cannot execute fluently. Consequently, we should simplify the steps of White-Box Cryptography in the case of not affecting the safety of White-Box Cryptography.