Dll Security

From: VP (pelasaco_at_gmail.com)
Date: 05/06/05

  • Next message: Keith Oxenrider: "Re: Dll Security" 
    Date: Fri, 6 May 2005 16:17:30 -0300
To: secprog@securityfocus.com

    Hi, i have a dll and i want to encrypt it to hide (obfuscate ??) an
    important algorithm used here.

    Well today i'm using a following approach:

    I'm encrypting the dll with a program, then when i want to loadlibrary() it,
    i decrypt it to a plain-text file, then i loadlibrary the plain-text file.
    So i have my encrypted dll and i have a plain-text version either. To
    mitigate this vulnerability, i'm using EFS to protect my plain-text dll.

    I'm wondering if using the PE format i can do some kind of "on-the-fly
    encrypt and decrypt". Is it possible ? There is any example ? Is it a good
    solution ?

    Thanks in advance,

    Victor

  • Next message: Keith Oxenrider: "Re: Dll Security"

    Relevant Pages

    • RE: Dll Security
      ... Subject: Dll Security ... i decrypt it to a plain-text file, then i loadlibrary the plain-text file. ... encrypt and decrypt". ...
      (SecProg)
    • Re: if I encrypt key data why do I want or need SSL?
      ... I could encrypt the ... name DLL responsible for all security aspects, ... Its trivial to decompile ANY .net ... For someone to send your web service they have to know the key? ...
      (microsoft.public.dotnet.security)
    • Re: Urgent: Securing a .net 1.1 application
      ... code will only load if the public key is the same, ... You could encrypt some functionality into a dll and load it at ...
      (microsoft.public.dotnet.security)
    • Re: Code protection
      ... Did you try to obfuscate it first? ... I would suggest you to use the tools accesible to the framework. ... solution you encrypt the dll, meaning that the file in the HDD is not longer ... a DLL, it's a data file. ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: Code protection
      ... of course the dll is obfuscated before encryption. ... in my case definitely not enougth protection (and it is the point, ... misunderstand me, I don't want to discuss if it is worth to encrypt, but HOW ... > I would give a try to obfuscation first. ...
      (microsoft.public.dotnet.languages.csharp)