@mega-yfue/eufy-sdk / tuya / TUYA_SIGN_K
Variable: TUYA_SIGN_K
ts
const TUYA_SIGN_K: string;App-wide HMAC-SHA256 signing key K (package_cert_stego_appSecret), assembled from four public per-build constants (wire-confirmed from the eufy Security/Mega app + native memory dump):
- package name:
com.oceanwing.battery.cam - developer signing-cert SHA-256 (colon-hex UPPER, verified from running app memory)
- stego value: extracted from
libthing_security.so + 0x384f0(keyed BMP steganography) - manifest app secret (also in TUYA_APP_SECRET in
request.ts)
All four components are public per-build constants. The env var TUYA_SIGN_KEY can override this for non-standard builds.