2

is there method to view and export files from phone storage keystore?

the android app i got has the keystore to managed digital user certs, it can be viewed via UI, i wanted to view them in phone storage but could not locate them.

guo
  • 21
  • 1
  • 2
  • 2
    Please be specific. Android has several "keystore" systems. Are you referring to the AndroidKeystore? This on modern devices a hardware protected storage for certificate and private keys. Which app are you talking about? – Robert Mar 26 '21 at 08:08
  • @Robert the app that developer design encrypted the user and CA certs in 'Keystore'. I thought it should be visible in app location but i did not see any file. so I wondering what other method to view it. – guo Apr 01 '21 at 07:41
  • Decompile the app and search for AndroidKeystore. It it uses this keystore type and you are on a recent device then the private keys are stored hardware protected. The keys can only be used on the device but not extracted. The AndroidKeystore is a system service that stores all keys+certs of all apps on the system. – Robert Apr 01 '21 at 07:55
  • @Robert i have the apk file only. can i decompile it? i did not own the source codes. – guo Apr 06 '21 at 07:03
  • 1
    Decompile it e.g. using Jadx and search for the term AndroidKeystore. – Robert Apr 06 '21 at 07:05

0 Answers0