Slide 21
Slide 21 text
AV O I D P L A I N T E X T K E Y S
• store like hex strings
Odessa Innovation Week, WebCamp 2015
unsigned char myApiKey[] = { 0xAB, 0xAA, 0xBE, 0xDE, 0xEF };
• obfuscate
NSString * key = [NSString stringWithFormat:@"%@%@%@%@", @"my",
@"secret", @"Api", @“Key"];
NSString * key = [NSString stringWithFormat:@"%3$@%2$@%1$@%4$@",
@"Api", @"secret", @"my", @"Key"];
NSString * format = [[[@"x3$yx2$z%1$yx4$@"
stringByReplacingOccurrencesOfString:@"x" withString:@"%"]
stringByReplacingOccurrencesOfString:@"y" withString:@"@"]
stringByReplacingOccurrencesOfString:@"z" withString:@"@"];
NSString * key = [NSString stringWithFormat:format, @"Api",
@"secret", @"my", @"Key"];
"mySecretApiKey"