Research Of Mobile Application Security Based On White-box Cryptography

Mobile applications have been gradually used in people's daily life due to the rapid development of smart terminals.The security issues of mobile applications,which have become the new focus in the field of information security,are attracting more and more attentions.Cryptographic algorithm is still the core technology of solutions of mobile application security issues,but it is facing many inherent difficulties when applied to the field of mobile security.As a new way to resolve these problems,The white-box cryptography theory was proposed and have been applied to some mobile applications,while it still has some prevailing problems,such as low efficiency,large memory occupy and lack of practical application case,which have not been resolved effectively.According to the problem mentioned above,this paper studied the white-box algorithm and its application in mobile application from two aspects:the implementation and optimization of the white-box cryptography,as while as the design and implementation of the Android reinforcement system based on white-box cryptography.The main works and achievements are summarized as follows:1)Further study of implementation and execution of the white-box cryptography algorithm,propose algorithm optimization method according to the characteristics in the process of algorithm implementation;Propose the system optimization method based on the entire algorithm implementation;Complete the instruction level optimization using SSE2 instruction set and NEON technology according to the characteristics of x86 and ARM platform,which can increase the efficiency of Xiao white-box AES algorithm to practical use.2)Discuss the protective problems existed in the application of white-box cryptography in mobile applications and propose the corresponding solution and the core technology;Complete the design and implementation of the Android reinforcement system and enhance the safety performance of the reinforcement application with the use of white-box cryptogaphy.So that the reinforced applications can better resist various attacks such as static analysis,dynamic cracks and so on.