Click here to Skip to main content
15,887,683 members
Home / Discussions / .NET (Core and Framework)
   

.NET (Core and Framework)

 
Generaldeploying .net apps with nsis Pin
fire.fox3-Feb-05 19:44
fire.fox3-Feb-05 19:44 
GeneralRe: deploying .net apps with nsis Pin
Charlie Williams4-Feb-05 6:20
Charlie Williams4-Feb-05 6:20 
GeneralRe: deploying .net apps with nsis Pin
Steve Maier4-Feb-05 10:09
professionalSteve Maier4-Feb-05 10:09 
GeneralRe: deploying .net apps with nsis Pin
fire.fox4-Feb-05 22:09
fire.fox4-Feb-05 22:09 
Generalbuild problem Pin
Ajek3-Feb-05 0:15
Ajek3-Feb-05 0:15 
GeneralDeploying Assemblys to the GAC Pin
JohnARyan2-Feb-05 6:46
JohnARyan2-Feb-05 6:46 
GeneralRe: Deploying Assemblys to the GAC Pin
Charlie Williams3-Feb-05 12:40
Charlie Williams3-Feb-05 12:40 
GeneralEncryption keys Pin
Ray Cassick1-Feb-05 18:41
Ray Cassick1-Feb-05 18:41 
Ok, time to ask the question here.. I have been battling over this one for sometime now and just have to ask it.

I have created a few classes that I use to act a security keys. These classes get serialized using a binary formatter and then symmetrically encrypted. The app will deserialize them and use the contents to judge licensing capabilities, etc…

Currently the license key and vectors are stored in the code. I don’t like the idea simply because it allows someone with a decompile to get at them. Yes, I can obfuscate the code but being paranoid like I am I have a feeling that is just not enough.

My real biggest fear besides the fact that someone can use the key to decrypt the data is that someone can also use the same key to create a program that will generate fake license keys for my app.

In another case I have to send a class across a wire on a remoting channel and the class is going to have a users name and password in it. Again, being the paranoid programmer that I am I am really afraid of someone with a sniffer out there looking at the raw bits. I would like to encrypt the password before I send the class across the wire. Again, I know that I can just hard code the keys into the app but we all know what I feel about that.

I know that I could use asymmetrical encryption and that gives me the ability to release a public key that can only be used to decrypt and that takes care of part of it but from what I have seen asymmetrical encryption is a royal pain in the butt because it only encrypts data of a maximum size so I would have to take that into account when I am serializing data and possibly split the data up into checks, each one encrypted…. Not a clean option really…

I know already, I have read tones of thing on remoting and how to build encryption sinks to be used for cases like this, but I really don't need to encrypt the entire message, just one part of it.

There HAS to be a way to reliably use symmetrical encryption without hard coding the keys into the code but also protecting them from being used by other people.

Any simple ideas to this tough question?


Paul Watson wrote:
"At the end of the day it is what you produce that counts, not how many doctorates you have on the wall."
George Carlin wrote:
"Don't sweat the petty things, and don't pet the sweaty things."
Jörgen Sigvardsson wrote:
If the physicists find a universal theory describing the laws of universe, I'm sure the a**hole constant will be an integral part of that theory.


GeneralRe: Encryption keys Pin
Robert Rohde1-Feb-05 21:42
Robert Rohde1-Feb-05 21:42 
GeneralRe: Encryption keys Pin
S. Senthil Kumar8-Feb-05 10:23
S. Senthil Kumar8-Feb-05 10:23 
Questionwhere did InstMsiW.Exe and InstMsiA.Exe go? Pin
Galen_21-Feb-05 12:22
Galen_21-Feb-05 12:22 
AnswerRe: where did InstMsiW.Exe and InstMsiA.Exe go? Pin
rwestgraham1-Feb-05 20:27
rwestgraham1-Feb-05 20:27 
Generalsubject : programming with .NET Framework to browsing my bank account, buy and sell stock shares Pin
Close Network1-Feb-05 5:47
Close Network1-Feb-05 5:47 
GeneralRemoting channels Pin
neeru26197631-Jan-05 22:33
neeru26197631-Jan-05 22:33 
GeneralRe: Remoting channels Pin
Charlie Williams1-Feb-05 4:51
Charlie Williams1-Feb-05 4:51 
GeneralInstaller woes Pin
Arun Bhalla31-Jan-05 19:29
Arun Bhalla31-Jan-05 19:29 
GeneralRe: Installer woes Pin
rwestgraham1-Feb-05 15:27
rwestgraham1-Feb-05 15:27 
GeneralRe: Installer woes Pin
Arun Bhalla2-Feb-05 8:46
Arun Bhalla2-Feb-05 8:46 
GeneralRe: Installer woes Pin
Arun Bhalla2-Feb-05 9:27
Arun Bhalla2-Feb-05 9:27 
GeneralRe: Installer woes Pin
rwestgraham2-Feb-05 11:57
rwestgraham2-Feb-05 11:57 
GeneralRe: Installer woes Pin
Arun Bhalla2-Feb-05 13:13
Arun Bhalla2-Feb-05 13:13 
GeneralRe: Installer woes Pin
rwestgraham2-Feb-05 13:29
rwestgraham2-Feb-05 13:29 
GeneralRe: Installer woes Pin
Arun Bhalla2-Feb-05 13:37
Arun Bhalla2-Feb-05 13:37 
Generalmy.msn.com Style Web Page Pin
Khurram Raza31-Jan-05 18:50
Khurram Raza31-Jan-05 18:50 
QuestionHow do I execute a class from a class? Pin
DSLR30-Jan-05 12:52
DSLR30-Jan-05 12:52 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.