【HarmonyOS Next】鸿蒙加固方案调研和分析

entry/build-profile.json5"enable": true，即可开启混淆。
// 打包将项目配置为release模式进行打包，此时混淆才会实际执行，最终生成混淆后的应用包。另外，如果想混淆字符串字面量属性名，还需在上述基础上再使用-enable-string-property-obfuscation

from Crypto.Cipher import AESfrom Crypto.Util.Padding import padimport os
def encrypt_file(key, input_file_path, output_file_path):    cipher = AES.new(key, AES.MODE_CBC)    with open(input_file_path, 'rb') as f_in:        plaintext = f_in.read()    ciphertext = cipher.encrypt(pad(plaintext, AES.block_size))    with open(output_file_path, 'wb') as f_out:        f_out.write(cipher.iv)        f_out.write(ciphertext)
# 使用示例key = os.urandom(16)  # 生成 16 字节的密钥input_file = 'your_code_file.js'output_file = 'encrypted_code_file.js'encrypt_file(key, input_file, output_file)

import fileio from '@ohos.fileio';
// 判断是否运行在模拟器环境的函数async function isRunningOnEmulator(): Promise<boolean> {    const sysDirPath = '/sys/devices/virtual/dmi/id';    const biosVendorFilePath = `${sysDirPath}/bios_vendor`;
    try {        // 检查 sysDirPath 是否存在        const sysDirStat = await fileio.stat(sysDirPath);        if (sysDirStat) {            // 检查 biosVendorFilePath 是否存在            const biosVendorFileStat = await fileio.stat(biosVendorFilePath);            if (biosVendorFileStat) {                // 读取 bios_vendor 文件内容                const fd = await fileio.open(biosVendorFilePath, 0o400);                const buffer = new ArrayBuffer(1024);                const readLength = await fileio.read(fd, buffer);                const biosVendor = new TextDecoder().decode(buffer.slice(0, readLength));                await fileio.close(fd);
                // 判断是否包含模拟器相关标识                return biosVendor.includes('Android') || biosVendor.includes('Genymotion');            }        }    } catch (e) {        console.error(`Error checking emulator: ${e.message}`);    }    return false;}
// 使用示例isRunningOnEmulator().then((result) => {    if (result) {        console.log('The app is running on an emulator.');    } else {        console.log('The app is running on a real device.');    }});

@Entry@Componentstruct SensitiveDataProtectionExample {  private sensitiveData: string | null = null;
  handleSensitiveData() {    // 模拟获取敏感数据    this.sensitiveData = 'mySecretPassword';
    // 处理敏感数据    console.log(`Processing sensitive data: ${this.sensitiveData}`);
    // 处理完后及时清除敏感数据    this.sensitiveData = null;  }
  build() {    Column({ space: 50 }) {      Button('Process Sensitive Data')        .onClick(() => {          this.handleSensitiveData();        })    }    .width('100%')  }}