混淆方案主要分为一下两种类型:
这里主要详情第一种,对于llvm混淆感兴趣的可以看看:
事前规定对需要混淆的函数和类加上指定前缀,而后通过脚本正则匹配扫描源文件,使用随机字符串替换掉函数名和类名。
实现起来比较简单,不需要做大量的脚本编写工作
侵入性比较大,不具有透明性这个特点,不是一个让人满意的方案
iOS Framework混淆/编译打包脚本(支持swift/oc/c++)
Sirius 提供代码混淆功能,并且提供多种混淆方案,但它存在一下缺陷:
files.json
,这个工作量还是很大的files.json
示例:
{ "project": { "rootPath": "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject", "projectFilePath": "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/iOSTestApp.xcodeproj" }, "module": { "name": "iOSTestApp", "triple": "arm64-apple-ios11.0" }, "sdk": { "name": "iphoneos", "path": "/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS11.0.sdk" }, "sourceFiles": [ "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/iOSTestApp/ViewController.swift", "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/iOSTestApp/AppDelegate.swift" ], "layoutFiles": [ "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/iOSTestApp/Base.lproj/LaunchScreen.storyboard", "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/iOSTestApp/Base.lproj/Main.storyboard" ], "explicitlyLinkedFrameworks": [ { "name":"CoreImage", "path":"/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer/SDKs/iPhoneOS11.0.sdk/System/Library/Frameworks/" } ], "implicitlyLinkedFrameworks":[ "UIKit" ], "frameworkSearchPaths": [ "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/Pods/Crashlytics/iOS" ], "headerSearchPaths": [ "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/Pods/Headers/Public" ], "configurationFile": "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/.obfuscation.yml" ], "bridgingHeader": "/Users/siejkowski/Polidea/SwiftObfuscator/TestProjects/iOS/Original/XcodeSampleProject/Bridging-header.h" ]}
假如你的工程文件多的话,手动配置这个文件很麻烦的。所以我尝试着使用脚本生成files.json
使用 plutil
(系统自带)工具 将project.pbxproj 解析为json
plutil -convert json -s -r -o project.pbxproj.xml project.pbxproj
使用python脚本解析 json, 并且生成files.json
首先要理解pbxproj 结构,才能做到比较好的解析。生成files.json
使用 sirius 代码混淆操作
$ bin/sirius -projectrootpath <path-to-xcode-project> - obfuscatedproject `<path-for-obfuscated-project>` [- namemappingstrategy <name-mapping-strategy>] [- keepintermediates] [-inplace] [-verbose]
对于第一个缺陷还能忍,但第二个真的无能为力了,各种编译错误解让你崩溃
使用起来超简单,只要要一个命令后即可以了,但会不会存在像Sirius
一样的问题还有待,进一步观察。
swiftshield -automatic -project-root /app/MyApp -automatic-project-file /app/MyApp/MyApp.xcworkspace -automatic-project-scheme MyApp-AppStore
目前来看使用swiftshield
是最优的选择,假如你有更好的方案,please call me.