DecompHub

PicPat

Project status: Unknown

Reverse engineering write-up of the Amber Security SDK (com.amber.lib.security) — the crypto wrapper used by PicPat (locket.live) and 16 sibling Android apps from the same vendor. Covers the SIGN_V2 signing algorithm, REQUEST_V2/RESPONSE_V2 authenticated encryption (AES-256-CBC + HMAC-SHA256), and the design issues found along the way.

Target software or hardware
Amber Security SDK
Work type
Reverse engineering and documentation
Primary public repository
github.com/qurtimurti/picpat
GitHub
0GitHub stars

Projects are sorted by the latest recorded repository star count. Stars indicate interest, not completion. Missing counts remain unknown.

About and scope

Reverse engineering write-up of the Amber Security SDK (com.amber.lib.security) — the crypto wrapper used by PicPat (locket.live) and 16 sibling Android apps from the same vendor. Covers the SIGN_V2 signing algorithm, REQUEST_V2/RESPONSE_V2 authenticated encryption (AES-256-CBC + HMAC-SHA256), and the design issues found along the way.

Contribution availability

Contribution policy unknown

AI-assisted contribution policy
Unspecified

Documented contributor systems

Contributor setup not documented

Reported progress

Progress not reported

Sources, builds and releases