APKVERIFIER(1)

🎀 APKVERIFIER(1) 🎀

---

✨ NAME ✨

okay so apkverifier is the tool that checks the signature on an Android APK 🔥 it's giving "verify it or it didn't happen" energy 💅

---

🧚 SYNOPSIS 🧚

Command line tool for verifying Android APK files, bestie 💖

apkverifier input.apk

input.apk needs to be an existing file that has an APK Signature 🦋

---

💜 DESCRIPTION 💜

Okay this one is so iconic 😭 It's a simple command line tool that checks the signatures on Android APK binaries. It can verify APK Signature scheme v1, v2 and v3, and it passes Google apksig's testing suite 🏆 It should support all algorithms and downgrade attack protection, so no cap, it's giving security ✨

Here's the lore 🌸 Android can handle even broken x509 certificates and ZIP files, so apkverifier uses the ZipReader from the apkparser package. It also vendors crypto/x509 in internal/x509andr and github.com/fullsailor/pkcs7 (https://github.com/fullsailor/pkcs7) in the fullsailor/pkcs7 folder. Those last two have some changes so they can handle certificates that aren't entirely according to spec 🙈 lowkey messy but it works, periodt 💅

---

🌈 SEE ALSO 🌈

Go check the docs on GoDoc at https://godoc.org/github.com/avast/apkverifier 📖🫶

---

Okay bestie, the footer was totally blank on this one 💀 no source, version, or date got filled in, so I'm not inventing any 🫶 Love you, mwah 💋✨