「Suiteki」- 小米手环密钥获取工具的实现原理

该文章在Sky233’s Blog同步发布，戳我直达

前言

开始做这个项目已经很久了，一开始只是想方便自己使用，但后来还是选择开发这个软件来给大众使用，方便他们获取这个密钥。这也是我做的第一个项目，下面就来讲一下我是怎么开发这个软件，和这个软件的原理

---

原理

针对小米运动健康和小米穿戴来讲，他们获取的密钥就是通过它们生成的日志文件来读取密钥
下面的是小米运动健康的一个日志文件的片段,这个日志文件存放在**/storage/emulated/0/Android/data/com.mi.health/files/log/XiaomiFit.device.log**中

2022-12-24 19:39:52.402|3.11.1|I|DeviceModel_7803_7803|the size of devices is 1 after there eco was filter
2022-12-24 19:39:52.402|3.11.1|I|DeviceModel_7803_7803|requestBindDeviceList bindDevices is [Device(did='huami.32098/11743619', productId=0, model='hmpace.motion.v6nfc', name='小米手环6 NFC版   ', extraValues=null, identifier='huami.32098/11743619', alias='', status=1, detail=Detail(mac=E3:A5:65:78:95:38, sn=32098/11743619, token=null, encryptKey=null, irqKey=null, beaconKey=null, thirdNodeId=null, peripheralId=null, authKey=51e59f734548bb0c759cb030d5893586, macAddress=E3:A5:65:78:95:38, deviceId=E3A565FFFE789538, phoneId=null, randomMac=null), isOwner=true)]
2022-12-24 19:39:52.409|3.11.1|I|XiaomiFit_7803_7803|com.mi.health:device receive lifecycle event, put
2022-12-24 19:39:52.409|3.11.1|I|AppManager_7803_7803|onLifecycleReceive() called with: activity = com.xiaomi.fitness.device.manager.ui.guide.GuideOpenKeepAliveSettingActivity;112235250;23004, lifecycle = onCreated
2022-12-24 19:39:52.425|3.11.1|I|XiaomiFit_7803_7803|com.mi.health:device receive lifecycle event, put
2022-12-24 19:39:52.425|3.11.1|I|AppManager_7803_7803|onLifecycleReceive() called with: activity = com.xiaomi.fitness.device.manager.ui.guide.GuideOpenKeepAliveSettingActivity;112235250;23004, lifecycle = onPostCreated
2022-12-24 19:39:52.436|3.11.1|I|XiaomiFit_7803_7803|com.mi.health:device receive lifecycle event, put
2022-12-24 19:39:52.436|3.11.1|I|AppManager_7803_7803|onLifecycleReceive() called with: activity = com.xiaomi.fitness.device.manager.ui.guide.GuideOpenKeepAliveSettingActivity;112235250;23004, lifecycle = onStart
2022-12-24 19:39:52.448|3.11.1|I|XiaomiFit_7803_7803|com.mi.health:device receive lifecycle event, put
2022-12-24 19:39:52.448|3.11.1|I|AppManager_7803_7803|onLifecycleReceive() called with: activity = com.xiaomi.fitness.device.manager.ui.guide.GuideOpenKeepAliveSettingActivity;112235250;23004, lifecycle = onResume
2022-12-24 19:39:52.672|3.11.1|I|DeviceModel_7803_7803|getEcoDevices scaleData is "{\"code\":0,\"message\":\"\",\"result\":{\"list\":[]}}"
2022-12-24 19:39:52.715|3.11.1|I|DeviceModel_7803_7803|getEcoDevices shareList is "{\"code\":200,\"message\":\"\",\"data\":[]}"
2022-12-24 19:39:52.715|3.11.1|I|DeviceModel_7803_7803|requestBindDeviceList ecoBindDevices is []

我们可以看到日志文件中包含了小米手环密钥,设备地址(MAC),设备型号(Model)
我们就可以分析这些日志文件来获取到我们想要的内容, 小米穿戴同理, 但小米穿戴则没有前者的内容丰富
仅有密钥和设备地址罢了, 但也勉强够用, 而小米穿戴的日志文件则是**/storage/emulated/0/Android/data/com.xiaomi.wearable/files/log/Wearable.log**

---

但很显然这样不够, 因为我们没有考虑到ZeppLife(原小米运动健康)的用户, 而ZeppLife是没有日志文件可以分析, 这样我们就需要参考Github上面的一个项目huami-token , 这个项目是用Python编写的, 没法在手机上直接运行, 所以我把它改写成了Java, 需要的话可以看我这个项目Suiteki-Lib, 原理是一样的, 需要的话可以去看一下那个Python项目

收尾

主要这篇文章就是试试水,也不打算写什么有用的东西,就想记录一下,这篇文章很水就是了