Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Identify which checksum algorithm that Apple uses for assets #2

Open
edorphy opened this issue Dec 23, 2021 · 1 comment
Open

Identify which checksum algorithm that Apple uses for assets #2

edorphy opened this issue Dec 23, 2021 · 1 comment
Labels
enhancement New feature or request help wanted Extra attention is needed security An issue with security implications
Milestone
Apple Defects / F...

Comments

@edorphy
Copy link
Owner

edorphy commented Dec 23, 2021

Asset Dictionary has a fileChecksum field but Apple doesn't document what algorithm is used. Figure this out so that that file integrity can be verified.
@edorphy edorphy added enhancement New feature or request help wanted Extra attention is needed security An issue with security implications labels Dec 23, 2021
@edorphy
Copy link
Owner Author

edorphy commented Jan 11, 2022

Filed feedback requesting documentation: FB9826224

Someone could still potentially reverse engineer the checksum algorithm. The CloudKit Catalog sample provides the attached image and checksum.
https://cdn.apple-cloudkit.com/cloudkit-catalog/#query

fileChecksum: ATiNtj034tTgyAwHN4aZsVKXSGyK

iceland-asset

@edorphy edorphy added this to the Apple Defects / Feedback milestone Jan 11, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request help wanted Extra attention is needed security An issue with security implications
Projects
None yet
Milestone
Apple Defects / Feedback
Development

No branches or pull requests
1 participant
@edorphy