Re: encrypted source file support in jdk?

Bent C Dalager wrote:
In article <fdg739$6g8$1@xxxxxxxx>, Tom Forsmo <tom@xxxxxxxxxx> wrote:
Hi

I an wondering if anybody knows if its possible to extend the functionality of the sun java compiler/vm in jdk6, with for example plugins or similar? or if the jdk supports something similar already?

(...)
- debugger
- information about classes must also be protected from prying eyes who have obtained the class files and using the debugger to get information.

If you are looking to protect your code from the owner/user of the
system, then you can only do this if all the software that is capable
of decrypting your ciphertext /and/ all instances of decrypted
cleartext are run and stored on a piece of hardware that is
effectively under your control.

What I was thinking of here was if somebody had illegally obtained the class files, and using debugging to reverse engineer the code. The usage scenario is that the class files are not public either, therefor no one should have a copy of the class files either, except for the people working in the company that owns the code.

Its not about protecting binaries sold to customer. Its about protecting IP of internal projects in progress, in the same way you would protect marketing plans etc.

regards

tom
.

Relevant Pages

  • Re: Block the debugger from seeing values of variables
    ... Think of it as if you're protecting something inside of a locked box. ... >encrypt individual segments, and only decrypt those segments when I need to ... Running a debugger is a highly privileged operation on ... >>>of the private fields of my classes in their debugger? ...
    (microsoft.public.dotnet.security)
  • Re: encrypted source file support in jdk?
    ... This is a common suggestion for protecting class files but it won't work. ... My scenario is for protecting source/class files where only a limited number of people have access to it, such as for internal use during development of a new product etc. or if you dont sell the code, but sell a web service that only you provide. ...
    (comp.lang.java.help)
  • Re: encrypted source file support in jdk?
    ... - en-/decryption support in the jvm runtime, covers tomcat, jboss etc. ... information about classes must also be protected from prying eyes who have obtained the class files and using the debugger to get information. ... This is a common suggestion for protecting class files but it won't work. ...
    (comp.lang.java.help)