Re: encrypted source file support in jdk?

In article <fdg739$6g8$1@xxxxxxxx>, Tom Forsmo <tom@xxxxxxxxxx> wrote:
Hi

I an wondering if anybody knows if its possible to extend the
functionality of the sun java compiler/vm in jdk6, with for example
plugins or similar? or if the jdk supports something similar already?

(...)
- debugger
- information about classes must also be protected from prying
eyes who have obtained the class files and using the debugger to get
information.

If you are looking to protect your code from the owner/user of the
system, then you can only do this if all the software that is capable
of decrypting your ciphertext /and/ all instances of decrypted
cleartext are run and stored on a piece of hardware that is
effectively under your control.

You might achieve this by giving the user a dongle with a processor in
it (a SmartCard perhaps) that is actually running the software and
presenting /only/ the final results of the software's computations to
the computer. Not knowing what your software actually does, I can't
comment on what sort of protocols you'd need in order to achieve this.

Or you might require the user to be online and use an internet site of
yours as a "remote dongle" where everything is actually run. This
effectively converts your software into a web-application-like animal.

Cheers
Bent D
--
Bent Dalager - bcd@xxxxxxx - http://www.pvv.org/~bcd
powered by emacs
.

Relevant Pages

  • Re[5]: Protecting code and data in Windows
    ... EL> This approach could be interesting to "protect" from malicious code ... EL> injected in the process itself: Windows itself uses such a mechanism ... another process (with Debug Programs privilege) which will use ... EL> So the first problem to soluce will be to avoid such a debugger ...
    (SecProg)
  • Re: Copy protection for a .NET application
    ... > The problem with decrypting the code yourself is that you have a readily ... > would make it a breeze for any decent cracker to break your protection. ... use debugger anyway, so it is not much difference for ... But I do know the hardlock encryption is very ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Copy protection for a .NET application
    ... >>accessable decryption module in your software to decrypt the DLL. ... >>would make it a breeze for any decent cracker to break your protection. ... > use debugger anyway, so it is not much difference for ... The decrypting part is in the hardlock, ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Copy protection for a .NET application
    ... > The problem with decrypting the code yourself is that you have a readily ... > would make it a breeze for any decent cracker to break your protection. ... use debugger anyway, so it is not much difference for ... But I do know the hardlock encryption is very ...
    (microsoft.public.dotnet.framework)
  • Re: Copy protection for a .NET application
    ... >>accessable decryption module in your software to decrypt the DLL. ... >>would make it a breeze for any decent cracker to break your protection. ... > use debugger anyway, so it is not much difference for ... The decrypting part is in the hardlock, ...
    (microsoft.public.dotnet.framework)