End-to-end security solutions for mobile, PC, and IoT applications
Xuanshu combines a security SDK embedded in mobile, PC, and IoT applications with dedicated backend services. Built around white-box cryptography, it protects applications before, during, and after execution, even in untrusted environments.
White-box cryptography makes keys difficult to extract even when the complete code is exposed. It safeguards keys and data during computation, storage, and transmission, using TLS channels and E2E content to provide dual encryption. It is suitable for protecting sensitive data, device identities, and API keys.
It builds a highly secure virtualized runtime environment on mobile devices, maximizing the security of critical code execution.
It checks and ensures the integrity of native code, uses compiler plug-ins to introduce obfuscation logic, and hardens the code.
Each instance is isolated at the application access level. Only authorized, legitimate mobile applications are allowed to invoke, access, and use the instance. Unauthorized apps, counterfeit apps, malicious third-party applications, and cross-application access and invocation are prohibited.
It assesses risks in the mobile application runtime environment in real time and comprehensively identifies high-risk scenarios, including root/jailbreak, emulator spoofing, dynamic debugging, app cloning and tampering, application signature issues, and memory integrity issues.
Each instance has a unique identifier and can be centrally managed through the backend.
By combining white-box cryptography with hardware security capabilities, it mitigates key exposure risks across memory, code and device environments.
Core algorithm structure
Standard black-box algorithm
Key runtime state
Keys run in plaintext in memory
Keys are exposed during computation
Attack resistance
Only defends against black-box attacks; fails immediately once the device is rooted
Reverse-engineering difficulty
Crackable by skilled hackers in 1–3 days
Device compatibility
Requires TEE hardware
Low-end devices receive limited protection
From hardware-secured key storage to business key protection, it isolates critical risks at every layer, ensuring keys at each level remain within the trusted boundary.
Prevent key extraction at the physical layer
Natively generated by mobile device chips (Android TEE / iOS Secure Enclave), acting as the trust foundation for all security mechanisms.
Xuanshu supports applications across mobile, PC, and IoT platforms, including Android, iOS, HarmonyOS NEXT, Windows, macOS, Linux, and RTOS, delivering consistent application security across devices and business scenarios.
It covers Chinese national cryptographic algorithms (SM2 and SM4) as well as mainstream international algorithms (RSA, AES, and general-purpose algorithms based on ECC) to support data protection and secure access across diverse business scenarios.
Whether you’re exploring our capabilities, evaluating a use case, or planning an SDK integration, we’d love to hear from you.
CONTACT US DIRECTLY trusafe@gi-de.comAccess Xuanshu development resources and integrate critical security capabilities into your products.
Download the SDK