摘要 |
During execution of modified code (S302), a device (110) generates (S304) a checksum for the modified code, and checks (S306) whether the generated checksum matches one of a plurality of stored possible checksums for the modified code (226), each possible checksum corresponding to a possible code obtained by modification of an original code that was modified to obtain the modified code. In case of a match, the device (110) verifies (S308) a signature on the plurality of stored possible checksums (226), and, if successfully verified, verifies (S310) the validity of a certificate for the signing key. The solution is particularly suitable for devices using the Android OS since the DEX during installation is optimized to an ODEX for which there is no certified checksum. |