I work for a place that offers an encryption suite for Android apps in the form of a
.so C library to be integrated in Android apps.
The issue is that there is only two exported functions in the
.so library: an
encrypt function and a
decrypt function. From what I know, one can simply call those two exported functions from ANY environment, not just our apps.
The idea here is to protect the encryption/decryption mechanism. Assuming that static analysis won't be possible (just humor me please :) ): Is there a way to make sure the
.so library can ONLY run from our apps?