Re: encrypted source file support in jdk?



Gordon Beaton wrote:
On Fri, 28 Sep 2007 11:41:05 +0200, tom forsmo wrote:
To explain again, what I am looking for is a way to protect the
SOURCE CODE and CLASS FILES during DEVELOPMENT, that means only when
the code is in-house.

The *employees* are the biggest security risk any company has. Will
yours get to see the code while they're working on it?

That is true, to solve that I am thinking something on the lines of:
- only supported tools are allowed. I.e. tools that can encrypt/decrypt code.
- all tools can only operate with encryption enabled.
- the tools must prohibit copy/paste outside the tool.
- if anything is to be exported to different formats the format must support encryption.

With all the new memorystick similar devices entering widespread use, and employees indiscriminately copying it to them, documents and source code is floating all over the place unprotected. that is why encrypting the files themselves are the only solution.

But I think I have found a viable solution to encrypting java source/class files in jdk6, which is to use the javax.compiler tool for source code and a cloassloader for the class files. For jdk7 its open source so I suppose I can just patch the compiler/jvm to give it native support instead, which makes it faster and more secure.

So, thanks for all suggestions so far.

regards

tom
.



Relevant Pages

  • Re: What do I replace Arachnophilia with ?
    ... If you're looking to get source code from class files, ... > much better job than javap. ... this isn't the same as Paul making ...
    (alt.os.linux)
  • Re: Identity of bytecode
    ... source code always produce the same byte code? ... The class files themselves may be different, ... It is also possible that different versions of the Java compiler will ... produce slightly different byte-code for the same source, ...
    (comp.lang.java.programmer)
  • Re: Q: Java source and directory structure - standard way ?
    ... > The point I was originally asking about was whether the source code ... > and the class files should be built into the same directories as the ... directory tree that can be located anywhere you want. ...
    (comp.lang.java)
  • Re: INFORMATION
    ... > To the end users I like give them a little warranty on the producto, ... > source code the end user will lose the warranty, ... into the costumers system an comparing MD5 digest of the .class files ... he is using with your original files. ...
    (freebsd-questions)
  • Re: Just wondering... EvilOgre.com
    ... Sharing of source code between Evil Ogre Team members ... >> our standards and we need to be able to meet the promise to our customers ... >> of being able to support software we sell should you be unavailable to ... non-commission sales). ...
    (borland.public.delphi.non-technical)