APK verification

lancevance

I downloaded an .apk file from Github alongside its sha256.txt, I used AppVerifier to verify the .apk file and I get 'SUCCESS', but when I copy the hash value from the sha256.txt and choose 'verify from clipboard' I get 'FAILURE', any idea why that is?

Dumdum

lancevance
Not an expert, but the sha256.txt is likely for the hash of the app itself. AppVerifier checks for the hash of the signing key.

lancevance

Dumdum You were correct, I extracted the sha256 from the .apk itself and the hash values matches that from the .txt file, AppVerifier checks the hash for the 'Signing Key' which is a different thing. Thanks!