Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Feb 2008 23:13:59 -0500
From:      Mike Meyer <mwm-keyword-freebsdhackers2.e313df@mired.org>
To:        freebsd-hackers@freebsd.org
Subject:   Re: encrypted executables
Message-ID:  <20080218231359.7601cd70@bhuda.mired.org>
In-Reply-To: <86068e730802181954t52e4e05ay65e04c5f6de9b78a@mail.gmail.com>
References:  <86068e730802181718s1ad50d3axeae0dde119ddcf92@mail.gmail.com> <47BA3334.4040707@andric.com> <86068e730802181954t52e4e05ay65e04c5f6de9b78a@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 18 Feb 2008 19:54:14 -0800 "Jerry Toung" <jrytoung@gmail.com> wrote:
> On Feb 18, 2008 5:39 PM, Dimitry Andric <dimitry@andric.com> wrote:
> > On 2008-02-19 02:18, Jerry Toung wrote:
> > > anybody knows of a tool to encrypt executables under FreeBSD? may be
> > from
> > > the ports?
> > > I am not talking about simple file encryption.
> >
> > Can you elaborate on what you *are* talking about then?  Some
> > security-by-obscurity scheme, perhaps? :)
> I need to encrypt elf binaries. I'd like to make it harder for the bad guy
> to reverse engineer my app.

Basically the DRM problem (only executing your property under
conditions you specify, not under those the end user might want). A
*lot* of money has been spent trying to do this, but nobody has done
it yet. Some very smart people have concluded it can't be done.

That said, you did say "harder", not "impossible". Making it harder is
certainly possible, depending on the conditions. What are they
conditions you want this to work under?

FWIW, the only thing that in this area is to not let them run the
critical parts of your app on their hardware. Put those on your
service, exported via the network, and then give the end user a UI
that talks to that.

     <mike
-- 
Mike Meyer <mwm@mired.org>		http://www.mired.org/consulting.html
Independent Network/Unix/Perforce consultant, email for more information.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080218231359.7601cd70>