apkverifier

Description

apkverifier is a simple command line tool that verifies the signatures on Android APK binaries. It can verify APK Signature scheme v1, v2 and v3 and passes Google apksig's testing suite. It should support all algorithms and downgrade attack protection.

Because Android can handle even broken x509 cerficates and ZIP files, apkverifier is using the ZipReader from apkparser package and vendors crypto/x509 in internal/x509andr and github.com/fullsailor/pkcs7 (https://github.com/fullsailor/pkcs7) in the fullsailor/pkcs7 folder. The last two have some changes to handle some not-entirely-according-to-spec certificates.

Documentation on GoDoc (https://godoc.org/github.com/avast/apkverifier)

---

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V

---

Homepage

https://github.com/avast/apkverifier

---

Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install apkverifier