hiding global variables



hi

we are using aes package and we want the key to be global so all
places using the package can use this global variable. we thought of
keeping the global creation key in one utilites file that is sourced
by all. we use tclcompiler to bytecode the application so all is
hidden. but tcl introspection abilities (info globals) allow me to see
that there is a global variable which then easily is seen. how can I
hide this global variable? is there another approach for a global key
file being used in many places in the files? what I want is to make it
hard for a hacker to find out the key. I know I can hard code the key
in all files and use 'sed' or something like it to change the key but
this will create a big overhead for patches.

thanks a lot

.



Relevant Pages

  • Re: hiding global variables
    ... we are using aes package and we want the key to be global so all ... but tcl introspection abilities (info globals) allow me to see ... hard for a hacker to find out the key. ... wouldn't count on a robust solution with plain I/O of the secret ...
    (comp.lang.tcl)
  • Re: hiding global variables
    ... places using the package can use this global variable. ... but tcl introspection abilities (info globals) allow me to see ... the same hacker could quite easily intercept syscalls and get the I/O ... we run our software with tclsh and we have packages. ...
    (comp.lang.tcl)
  • Re: hiding global variables
    ... but tcl introspection abilities (info globals) allow me to see ... the same hacker could quite easily intercept syscalls and get the I/O ... packages and files. ...
    (comp.lang.tcl)
  • Re: hiding global variables
    ... but tcl introspection abilities (info globals) allow me to see ... the same hacker could quite easily intercept syscalls and get the I/O ... packages and files. ...
    (comp.lang.tcl)
  • Re: hiding global variables
    ... places using the package can use this global variable. ... but tcl introspection abilities (info globals) allow me to see ... the same hacker could quite easily intercept syscalls and get the I/O ...
    (comp.lang.tcl)