Re: Strong names ....

From: Rahul Kumar (rahul.kumar.remove_it_at_sage.remove_it.com)
Date: 11/17/04 

Date: Wed, 17 Nov 2004 09:51:30 -0000

Leaonardo
There are several things going on here.
I assume you have signed both your assemblies (the exe and the dll) with
your strong name.
Someone would have to remove the strong name from your dll to change the
code. But he won't be able to sign it back again with the same strong name
(unless your private key has been compromised). Suppose, he can't sign it
with your strong name, your exe could stop referencing the changed dll
because the dll's public key token in the exe's manifest would be different
from the changed token. However, nothing stops the same person to unsign and
again sign your exe with his own strong name. This way, your application
would execute and do what ever the hacker has planned it to do.
Please follow up with more readings from these threads:
news:Og29K9TpEHA.2684@TK2MSFTNGP11.phx.gbl...
news:#sjbVS1yEHA.3624@TK2MSFTNGP09.phx.gbl... 

-- 
Rahul Kumar
http://dotnetyogi.blogspot.com
This message is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within it are my own and do not necessarily
constitute those of my employer.
"Leonardo D'Ippolito" <leodippolito@terra.com.br> wrote in message
news:uZ5I8iHzEHA.4028@TK2MSFTNGP15.phx.gbl...
> Hello sirs,
>
> I am trying to understand how strong names work.
>
> Suppose I have lib.dll (a .net library), and also MyApplication.exe (a
.NET
> WinApp) . MyApplication uses lib.dll . Suppose someone decompiles lib.dll
> and replaces code parts, and then recompiles again. When MyApplication.exe
> will load lib.dll the next time, will it detect that it is a different dll
> if they have strong names?
>
> How can I implement this procedure? If someone can give me an example I
> would appreciate!
>
> Thanks a lot!
>
>

Relevant Pages

  • Re: Appl. Security Problems
    ... "Steve B." ... If this works for the EXE, then perhaps there's some problem with the DLL ... the key you use to sign your production assemblies ...
    (microsoft.public.dotnet.security)
  • Assembly.LoadFrom("Http://www......
    ... The EXE is an empty shell calling the Sub Main ... Should I include some policy file with the DLL? ... Should I use the "policy deployment package" ... on the requested assemblies. ...
    (microsoft.public.dotnet.security)
  • Re: Editors
    ... some strip them on exe files by default. ... "preferred base address" and, yup, relocations are completely ... DLL files, though, aren't loaded into their own address space but are ... EXE's "entry-point", though, is not "special" in that it's just an ...
    (alt.lang.asm)
  • Re: Newbie to .net framework - what is an .net assembly?
    ... You create your DLL or EXE and distribute it just like ... when you compile your .NET app in VS, it's compiled to IL and not machine ... You can also secure your assemblies ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: How to unzip a file ?
    ... lumping the dll into my own dir alongside my exe. ... Do I need to create a sub-folder called BIN before I run this bat file ... code with .Net 1.1 assemblies and code in VS2003 ...
    (microsoft.public.dotnet.languages.vb)
Quantcast