--- /home/fdroid/fdroiddata/tmp/org.simlar_74.apk +++ /home/fdroid/fdroiddata/tmp/sigcp_org.simlar_74.apk ├── /usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {} │┄ error from `/usr/lib/android-sdk/build-tools/debian/apksigner verify --verbose --print-certs {}` (b): │┄ DOES NOT VERIFY │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. CHUNKED_SHA256 digest mismatch. Expected: <580594305f7a64ceef7766b496e150c38b51c5d824de98804750f0e79ad84a3a>, actual: <7b7ffe3c127f159a5faf07a08f380453c621200ec7e5f97fe960d35497996fc2> │┄ ERROR: APK Signature Scheme v3 signer #1: APK integrity check failed. VERITY_CHUNKED_SHA256 digest mismatch. Expected: <90f75f69a01839937d3ad5a79818468f7e1284dacf49c19d6b72307c1752fd70937b1b0200000000>, actual: <2ca3aa57b461992b95e7f3d41c724338f5c209422bd8b00e63d10c78d8aa8814937b1b0200000000> │ @@ -1,61 +0,0 @@ │ -Verifies │ -Verified using v1 scheme (JAR signing): true │ -Verified using v2 scheme (APK Signature Scheme v2): true │ -Verified using v3 scheme (APK Signature Scheme v3): true │ -Verified using v4 scheme (APK Signature Scheme v4): false │ -Verified for SourceStamp: false │ -Number of signers: 1 │ -Signer #1 certificate DN: CN=FDroid, OU=FDroid, O=fdroid.org, L=ORG, ST=ORG, C=UK │ -Signer #1 certificate SHA-256 digest: 3306a18a174d859884987c2f7ac047189aa2df10a1975d6f9de1294f7954db91 │ -Signer #1 certificate SHA-1 digest: 537c8fd50a083ed1b7602b1b0aaa8612653f7a41 │ -Signer #1 certificate MD5 digest: 441cf87587ae166cf5b0947177ba0623 │ -Signer #1 key algorithm: RSA │ -Signer #1 key size (bits): 2048 │ -Signer #1 public key SHA-256 digest: 85e032440c20be637b0e7e76d3da4453c6fc3c368697f50060ae087bfa91787d │ -Signer #1 public key SHA-1 digest: f9d5ac07823db2de8b4683ca524dfcce47bf6e83 │ -Signer #1 public key MD5 digest: 1497c6bb8e0a3696d13e056d2ae6f120 │ -WARNING: META-INF/com/android/build/gradle/app-metadata.properties not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.activity_activity.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.annotation_annotation-experimental.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.appcompat_appcompat-resources.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.appcompat_appcompat.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.arch.core_core-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.asynclayoutinflater_asynclayoutinflater.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.coordinatorlayout_coordinatorlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.core_core-ktx.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.core_core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.cursoradapter_cursoradapter.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.customview_customview.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.documentfile_documentfile.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.drawerlayout_drawerlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.emoji2_emoji2-views-helper.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.emoji2_emoji2.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.fragment_fragment.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.interpolator_interpolator.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-ui.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-core-utils.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-v13.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.legacy_legacy-support-v4.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata-core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-livedata.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-process.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel-savedstate.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.lifecycle_lifecycle-viewmodel.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.loader_loader.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.localbroadcastmanager_localbroadcastmanager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.media_media.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.print_print.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.savedstate_savedstate.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.slidingpanelayout_slidingpanelayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.startup_startup-runtime.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.swiperefreshlayout_swiperefreshlayout.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.tracing_tracing.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.vectordrawable_vectordrawable-animated.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.vectordrawable_vectordrawable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.versionedparcelable_versionedparcelable.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/androidx.viewpager_viewpager.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/kotlinx_coroutines_android.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/kotlinx_coroutines_core.version not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/l1.b not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. │ -WARNING: META-INF/services/o1.f not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/. ├── zipinfo {} │ @@ -1216,8 +1216,8 @@ │ -rw---- 2.0 fat 939 b- defN 81-Jan-01 01:01 kotlin/internal/internal.kotlin_builtins │ -rw---- 2.0 fat 14256 b- defN 81-Jan-01 01:01 kotlin/kotlin.kotlin_builtins │ -rw---- 2.0 fat 2301 b- defN 81-Jan-01 01:01 kotlin/ranges/ranges.kotlin_builtins │ -rw---- 2.0 fat 2338 b- defN 81-Jan-01 01:01 kotlin/reflect/reflect.kotlin_builtins │ -rw---- 2.0 fat 133040 b- defN 81-Jan-01 01:01 META-INF/6275E761.SF │ -rw---- 2.0 fat 1334 b- defN 81-Jan-01 01:01 META-INF/6275E761.RSA │ -rw---- 2.0 fat 132913 b- defN 81-Jan-01 01:01 META-INF/MANIFEST.MF │ -1221 files, 85676395 bytes uncompressed, 35168049 bytes compressed: 59.0% │ +1221 files, 85676395 bytes uncompressed, 35168048 bytes compressed: 59.0% ├── lib/armeabi-v7a/libmediastreamer.so │┄ File has been modified after NT_GNU_BUILD_ID has been applied. │ ├── readelf --wide --notes {} │ │ @@ -1,12 +1,12 @@ │ │ │ │ Displaying notes found in: .note.android.ident │ │ Owner Data size Description │ │ Android 0x00000084 NT_VERSION (version) description data: 15 00 00 00 72 32 31 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 30 37 35 35 32 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 │ │ │ │ Displaying notes found in: .note.gnu.build-id │ │ Owner Data size Description │ │ - GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: 714a5de66da61bc8b1999bf7b4c208562b7da340 │ │ + GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: 227df63ee303324ff7537645a47eb88915dd52e4 │ │ │ │ Displaying notes found in: .note.gnu.gold-version │ │ Owner Data size Description │ │ GNU 0x00000009 NT_GNU_GOLD_VERSION (gold version) Version: gold 1.12 │ ├── strings --all --bytes=8 {} │ │ @@ -10849,15 +10849,15 @@ │ │ ungetc failed │ │ Unrecognized input file format │ │ Unsupported output file format │ │ TJ_OPTIMIZE │ │ TJ_ARITHMETIC │ │ TJ_RESTART │ │ TJ_PROGRESSIVE │ │ -libjpeg-turbo version 2.0.5 (build 20221126) │ │ +libjpeg-turbo version 2.0.5 (build 20221215) │ │ Bogus message code %d │ │ Sorry, arithmetic coding is not implemented │ │ ALIGN_TYPE is wrong, please fix │ │ MAX_ALLOC_CHUNK is wrong, please fix │ │ Bogus buffer control mode │ │ Invalid component ID %d in SOS │ │ DCT coefficient out of range │ ├── readelf --wide --decompress --hex-dump=.rodata {} │ │ @@ -6421,15 +6421,15 @@ │ │ 0x00321a20 4f505449 4d495a45 00544a5f 41524954 OPTIMIZE.TJ_ARIT │ │ 0x00321a30 484d4554 49430054 4a5f5245 53544152 HMETIC.TJ_RESTAR │ │ 0x00321a40 54002564 25630054 4a5f5052 4f475245 T.%d%c.TJ_PROGRE │ │ 0x00321a50 53534956 45005035 0a256c64 20256c64 SSIVE.P5.%ld %ld │ │ 0x00321a60 0a25640a 0050360a 256c6420 256c640a .%d..P6.%ld %ld. │ │ 0x00321a70 25640a00 6c69626a 7065672d 74757262 %d..libjpeg-turb │ │ 0x00321a80 6f207665 7273696f 6e20322e 302e3520 o version 2.0.5 │ │ - 0x00321a90 28627569 6c642032 30323231 31323629 (build 20221126) │ │ + 0x00321a90 28627569 6c642032 30323231 32313529 (build 20221215) │ │ 0x00321aa0 00426f67 7573206d 65737361 67652063 .Bogus message c │ │ 0x00321ab0 6f646520 25640053 6f727279 2c206172 ode %d.Sorry, ar │ │ 0x00321ac0 6974686d 65746963 20636f64 696e6720 ithmetic coding │ │ 0x00321ad0 6973206e 6f742069 6d706c65 6d656e74 is not implement │ │ 0x00321ae0 65640041 4c49474e 5f545950 45206973 ed.ALIGN_TYPE is │ │ 0x00321af0 2077726f 6e672c20 706c6561 73652066 wrong, please f │ │ 0x00321b00 6978004d 41585f41 4c4c4f43 5f434855 ix.MAX_ALLOC_CHU ├── lib/arm64-v8a/libmediastreamer.so │ ├── readelf --wide --notes {} │ │ @@ -1,8 +1,8 @@ │ │ │ │ Displaying notes found in: .note.gnu.build-id │ │ Owner Data size Description │ │ - GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: e19919f8994d24a7e3dd908ec5420a694ceb99eb │ │ + GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: 6ab9568c360ce027a6bebbaa2a1481371214fb90 │ │ │ │ Displaying notes found in: .note.android.ident │ │ Owner Data size Description │ │ Android 0x00000084 NT_VERSION (version) description data: 15 00 00 00 72 32 31 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 30 37 35 35 32 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 │ ├── strings --all --bytes=8 {} │ │ @@ -10076,15 +10076,15 @@ │ │ Unrecognized input file format │ │ Unsupported output file format │ │ TJ_OPTIMIZE │ │ TJ_ARITHMETIC │ │ TJ_RESTART │ │ TJ_PROGRESSIVE │ │ No error │ │ -libjpeg-turbo version 2.0.5 (build 20221126) │ │ +libjpeg-turbo version 2.0.5 (build 20221215) │ │ %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz │ │ &'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz │ │ SSSSNS1NBogus message code %d │ │ Sorry, arithmetic coding is not implemented │ │ ALIGN_TYPE is wrong, please fix │ │ MAX_ALLOC_CHUNK is wrong, please fix │ │ Bogus buffer control mode │ ├── readelf --wide --decompress --hex-dump=.rodata {} │ │ @@ -10061,15 +10061,15 @@ │ │ 0x003cafa0 04000000 04000000 04000000 04000000 ................ │ │ 0x003cafb0 04000000 ffffffff 29000000 ffff0000 ........)....... │ │ 0x003cafc0 29000000 dcff0000 13000000 00000000 )............... │ │ 0x003cafd0 00000000 3f000000 00000000 00000000 ....?........... │ │ 0x003cafe0 01000000 01000000 01000000 08000000 ................ │ │ 0x003caff0 6c69626a 7065672d 74757262 6f207665 libjpeg-turbo ve │ │ 0x003cb000 7273696f 6e20322e 302e3520 28627569 rsion 2.0.5 (bui │ │ - 0x003cb010 6c642032 30323231 31323629 00070900 ld 20221126).... │ │ + 0x003cb010 6c642032 30323231 32313529 00070900 ld 20221215).... │ │ 0x003cb020 000b0d00 00000000 00000000 00000000 ................ │ │ 0x003cb030 02000000 02000000 00000000 00000000 ................ │ │ 0x003cb040 01000000 05000000 00000000 02000000 ................ │ │ 0x003cb050 06000000 3f000000 00000000 02000000 ....?........... │ │ 0x003cb060 01000000 3f000000 02000000 01000000 ....?........... │ │ 0x003cb070 01000000 3f000000 01000000 00000000 ....?........... │ │ 0x003cb080 01000000 3f000000 00000000 01000000 ....?........... ├── lib/x86/libmediastreamer.so │┄ File has been modified after NT_GNU_BUILD_ID has been applied. │ ├── readelf --wide --notes {} │ │ @@ -1,12 +1,12 @@ │ │ │ │ Displaying notes found in: .note.android.ident │ │ Owner Data size Description │ │ Android 0x00000084 NT_VERSION (version) description data: 15 00 00 00 72 32 31 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 30 37 35 35 32 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 │ │ │ │ Displaying notes found in: .note.gnu.build-id │ │ Owner Data size Description │ │ - GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: cfd040372ad12cf08fd239e44c221900f55f6e0c │ │ + GNU 0x00000014 NT_GNU_BUILD_ID (unique build ID bitstring) Build ID: 04332365302ceb5a713f1a4fbb3a909dc10ec7c4 │ │ │ │ Displaying notes found in: .note.gnu.gold-version │ │ Owner Data size Description │ │ GNU 0x00000009 NT_GNU_GOLD_VERSION (gold version) Version: gold 1.12 │ ├── strings --all --bytes=8 {} │ │ @@ -9580,15 +9580,15 @@ │ │ ungetc failed │ │ Unrecognized input file format │ │ Unsupported output file format │ │ TJ_OPTIMIZE │ │ TJ_ARITHMETIC │ │ TJ_RESTART │ │ TJ_PROGRESSIVE │ │ -libjpeg-turbo version 2.0.5 (build 20221126) │ │ +libjpeg-turbo version 2.0.5 (build 20221215) │ │ Bogus message code %d │ │ Sorry, arithmetic coding is not implemented │ │ ALIGN_TYPE is wrong, please fix │ │ MAX_ALLOC_CHUNK is wrong, please fix │ │ Bogus buffer control mode │ │ Invalid component ID %d in SOS │ │ DCT coefficient out of range │ ├── readelf --wide --decompress --hex-dump=.rodata {} │ │ @@ -6584,15 +6584,15 @@ │ │ 0x00403e70 4d495a45 00544a5f 41524954 484d4554 MIZE.TJ_ARITHMET │ │ 0x00403e80 49430054 4a5f5245 53544152 54002564 IC.TJ_RESTART.%d │ │ 0x00403e90 25630054 4a5f5052 4f475245 53534956 %c.TJ_PROGRESSIV │ │ 0x00403ea0 45005035 0a256c64 20256c64 0a25640a E.P5.%ld %ld.%d. │ │ 0x00403eb0 0050360a 256c6420 256c640a 25640a00 .P6.%ld %ld.%d.. │ │ 0x00403ec0 6c69626a 7065672d 74757262 6f207665 libjpeg-turbo ve │ │ 0x00403ed0 7273696f 6e20322e 302e3520 28627569 rsion 2.0.5 (bui │ │ - 0x00403ee0 6c642032 30323231 31323629 00426f67 ld 20221126).Bog │ │ + 0x00403ee0 6c642032 30323231 32313529 00426f67 ld 20221215).Bog │ │ 0x00403ef0 7573206d 65737361 67652063 6f646520 us message code │ │ 0x00403f00 25640053 6f727279 2c206172 6974686d %d.Sorry, arithm │ │ 0x00403f10 65746963 20636f64 696e6720 6973206e etic coding is n │ │ 0x00403f20 6f742069 6d706c65 6d656e74 65640041 ot implemented.A │ │ 0x00403f30 4c49474e 5f545950 45206973 2077726f LIGN_TYPE is wro │ │ 0x00403f40 6e672c20 706c6561 73652066 6978004d ng, please fix.M │ │ 0x00403f50 41585f41 4c4c4f43 5f434855 4e4b2069 AX_ALLOC_CHUNK i