Skip to content

Instantly share code, notes, and snippets.

@DejanEnspyra
Created May 31, 2017 17:51
Show Gist options
  • Save DejanEnspyra/80e259e3c9adf5e46632631b49cd1007 to your computer and use it in GitHub Desktop.
Save DejanEnspyra/80e259e3c9adf5e46632631b49cd1007 to your computer and use it in GitHub Desktop.
Obfuscation of hard-coded security-sensitive strings.
//
// Obfuscator.swift
//
// Created by Dejan Atanasov on 2017-05-31.
//
import Foundation
class Obfuscator: AnyObject {
// MARK: - Variables
/// The salt used to obfuscate and reveal the string.
private var salt: String = ""
// MARK: - Initialization
init(withSalt salt: [AnyObject]) {
self.salt = salt.description
}
// MARK: - Instance Methods
/**
This method obfuscates the string passed in using the salt
that was used when the Obfuscator was initialized.
- parameter string: the string to obfuscate
- returns: the obfuscated string in a byte array
*/
func bytesByObfuscatingString(string: String) -> [UInt8] {
let text = [UInt8](string.utf8)
let cipher = [UInt8](self.salt.utf8)
let length = cipher.count
var encrypted = [UInt8]()
for t in text.enumerated() {
encrypted.append(t.element ^ cipher[t.offset % length])
}
#if DEVELOPMENT
print("Salt used: \(self.salt)\n")
print("Swift Code:\n************")
print("// Original \"\(string)\"")
print("let key: [UInt8] = \(encrypted)\n")
#endif
return encrypted
}
/**
This method reveals the original string from the obfuscated
byte array passed in. The salt must be the same as the one
used to encrypt it in the first place.
- parameter key: the byte array to reveal
- returns: the original string
*/
func reveal(key: [UInt8]) -> String {
let cipher = [UInt8](self.salt.utf8)
let length = cipher.count
var decrypted = [UInt8]()
for k in key.enumerated() {
decrypted.append(k.element ^ cipher[k.offset % length])
}
return String(bytes: decrypted, encoding: .utf8)!
}
}
@itsamirhn
Copy link

Swift 4.2
if you are using swift 4.2, you should replace AnyObject with Any in line 19 like this:
init(withSalt salt: [Any]) { self.salt = salt.description }

@CristiCh
Copy link

CristiCh commented May 6, 2019

What license does this code have?

@michael-martinez
Copy link

Question for steps 2 and 3, is it equally safe to replace with the following code ?

enum ObfuscatedConstants {
static let obfuscatedString = Obfuscator().reveal(key: [34, 17, 93, 37, 21, 28, 72, 23, 20, 22, 72, 127, 98, 123, 87, 94, 92, 83, 76, 113])
}
GADMobileAds.configure(withApplicationID: ObfuscatedConstants.obfuscatedString)

@pjebs
Copy link

pjebs commented Oct 13, 2020

@Shamsiddin
Copy link

Shamsiddin commented Feb 11, 2021

@thexande Don't you give a chance to init Obfuscator with an arbitrary salt (classes)?

@pooja5singh
Copy link

This really helped thanks a ton!!!!

@yanjinsheng
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment