funambol / android-sms-hash-generator Goto Github PK

Hello! Thanks for the tool. Super useful.
Some of my keystore passwords have weird characters. One contains all of these: "*_^[?".

I tried calling smshash.py like this:

python3 smshash.py path/keystore MyAndroidKey "*_^[?" com.example.myapp and my shell accepted it.
But smshash.py was making this call without "", so it failed:

keytool -alias MyAndroidKey -exportcert -keystore path/keystore -storepass *_^[?
keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect

This code fixes it:
return keytoolName + " " + "-alias " + args.alias + " -exportcert -keystore " + args.keystore + " -storepass \"" + args.keypass + "\""

For some reason, this generator does not produce valid hashes for me. I have tried it with two keystores/keys, it just doesn't produce the correct hash. As in, the SMS retrieval does not workd.

The AppSignatureHelper produces different hashes for the same app/keystore/key, but with that, SMS retrieval does work.

Unfortunately I don't have much time to analyze it, maybe someone else wants to do this if needed.

https://github.com/googlearchive/android-credentials/blob/master/sms-verification/android/app/src/main/java/com/google/samples/smartlock/sms_verify/AppSignatureHelper.java

For Xamarin, the default debug keystore used to sign the app uses a blank password.

The python script does not support it