Secure App ROM data classes

The following sections provide more detailed information about every class and method available in this API.

The Secure App ROM API is similar to the Android AssetManager. Instead of opening an asset file assets/MyFile.txt through the AssetManager

FileInputStream file = myActivity.getAssets().open("MyFile.txt");

you can use the class SecureAppRom to open a sarom file assets/sarom/secret/Text:

FileInputStream secret = SecureAppRom.getInstance(context).open("secret/Text");

class SecureAppRom

This class provides the API to access the OneSpan App Shielding Secure App ROM.

The SecureAppRom class gives access to the encrypted assets stored in the assets/sarom/ folder. When the application is shielded, SecureAppRom.open() returns an InputStream which transparently decrypts the file content when the caller reads bytes from the stream.

The API supports both normal APKs and asset packs in App Bundles. For more information, refer to the Android developer documentation on asset delivery.

• To access sarom files from normal APKs, from base modules of an AppBundler or from install-time asset-packs, use SecureAppRom.open().

• To access sarom files from fast-follow or on-demand asset-packs, use SecureAppRom.open(String,String).

  When the application is not shielded, SecureAppRom.open() returns an InputStream to the unencrypted file content. The same is true for the App Bundlesversion.

• static SecureAppRom getInstance(Context context)

  This static method returns a new instance of SecureAppRom.

• InputStream open(String key)

  Opens the Secure App ROM entry defined by key. key is the file path relative to assets/sarom/.

• InputStream open(String assetPackAssetsPath, String key)

  Opens the Secure App ROM entry defined by key in fast-follow and on-demand asset packs. key is the file path relative to assets/sarom/ in the asset pack. assetPackAssetsLocation is the absolute path in the file system to where the AssetPack has been downloaded and can be retrieved with AssetPackLocation.assetsPath() in the Google Play library. For more information, refer to the Android developer documentation on asset delivery.

  The Google Play Asset Delivery APIs are asynchronous, and that the Secure App ROM API requires that the asset pack is fully downloaded before accessing.