Do Son 
The Android operating system utilizes Android Runtime (ART) to execute application code. When a new application is installed, Android employs a tool called dex2oat to process the APK’s .dex files, which contain the compiled bytecode of the application. The dex2oat tool then generates one or more application artifacts from this file.
These artifacts play a crucial role in enabling the operating system to load applications more quickly and efficiently, making them an integral part of the Android ecosystem. Specifically, artifacts may take several forms: .vdex files include additional metadata to accelerate bytecode verification at runtime; .odex files contain precompiled code from the application; and .art files store internal runtime data—such as strings or classes—to expedite app launch performance.
For most Android devices, installing new apps and games is a seamless experience. However, on devices with lower processing power or slower storage speeds, the installation of large applications can be sluggish. To address this, Google is exploring a new optimization strategy aimed at enhancing app performance on lower-tier hardware.
According to a report from Android Authority, Google intends to introduce a new feature in Android 16 called Cloud Compilation. This functionality will allow devices to load precompiled application artifacts directly from files downloaded through the Google Play Store, bypassing the need for local compilation via dex2oat.
By offloading the compilation process to the cloud, Android 16 aims to significantly reduce installation time on entry-level devices—particularly for apps requiring the compilation of extensive codebases. Under this approach, precompiled artifacts would be extracted from SDM files retrieved from Google Play.
The SDM (Secure Dex Metadata) format is a new file type introduced in Android 16, containing cloud-generated compilation artifacts signed with the same keys used to sign APKs. However, this feature remains in testing and has not yet been rolled out, as Google must first configure the Play Store infrastructure to enable dex2oat to generate the required artifacts.
For developers, this initiative could be a welcome enhancement, potentially improving installation speeds for even the most resource-intensive apps on budget devices. Nevertheless, the feature may be optional in practice, as cloud compilation would increase data usage—potentially imposing higher costs in regions where mobile data is expensive.
Related Posts:
- Critical security vulnerability in Babel, a popular JavaScript transpiler
- CVE-2025-27364 (CVSS 10): Remote Code Execution Flaw Found in MITRE Caldera, PoC Releases
Support Our Threat Intelligence
Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
