Click here to Skip to main content
15,881,381 members
Home / Discussions / .NET (Core and Framework)
   

.NET (Core and Framework)

 
GeneralRe: MCP certification help Pin
satishrg5-Apr-05 15:18
satishrg5-Apr-05 15:18 
GeneralRe: MCP certification help Pin
Kodanda Pani5-Apr-05 17:45
Kodanda Pani5-Apr-05 17:45 
GeneralRe: MCP certification help Pin
Claudio Grazioli3-Apr-05 21:04
Claudio Grazioli3-Apr-05 21:04 
QuestionEncryption - how do I store a password/key in my App? Pin
Lakitu31-Mar-05 2:59
Lakitu31-Mar-05 2:59 
AnswerRe: Encryption - how do I store a password/key in my App? Pin
S. Senthil Kumar31-Mar-05 3:10
S. Senthil Kumar31-Mar-05 3:10 
GeneralRe: Encryption - how do I store a password/key in my App? Pin
Lakitu31-Mar-05 3:23
Lakitu31-Mar-05 3:23 
GeneralRe: Encryption - how do I store a password/key in my App? Pin
Steven Campbell1-Apr-05 7:46
Steven Campbell1-Apr-05 7:46 
AnswerRe: Encryption - how do I store a password/key in my App? Pin
afinnell7-Apr-05 10:09
afinnell7-Apr-05 10:09 
If you are truely paranoid about it there are a few things you can do:

1) Write a C function that returns all of your information and compile it into a DLL. Use P/Invoke to retrieve the information. Make sure all of the string data you store in the DLL is encrypted. When you return it from the C function you can unencrypt it at that time. Store the keys in the DLL as a byte array not a string to prevent 'strings' processing.

2) Write a COM dll that does the same thing as 1

There are problems with this as well because anyone else can load the C function, or COM object and invoke the required methods.

There is also the question of hiding information from one customer to another. You could do a one-time key gen and store it on the client machine. This would prevent one customer from obtaining information that might be important to someone else if they got a hold of their data files.

Yet another approach would be to use an algorithmic key generation approach. This would involve using a complex sequence of steps that produce a static key. The key wouldn't embeded in the software, but the algorithm that generates the key would be in the code. This code then could be obfuscated adding another layer of protection (Protection being relative in this case).

Always remember that if a client has binaries on their machine, it's difficult to absolutely prevent them from getting a hold of important data. That being said, you can make it so difficult to obtain the information that it's not worth it.

Now for the security experts, security by obscurity is not a good option. All of the methods I have mentioned is security through obscurity. Normally when it comes to security you need to base on it something else, like 'things they have', 'things they know', etc...



-
Drew
GeneralMemmory mapping in .NET Pin
Themis31-Mar-05 0:41
Themis31-Mar-05 0:41 
GeneralRe: Memmory mapping in .NET Pin
Colin Angus Mackay31-Mar-05 3:21
Colin Angus Mackay31-Mar-05 3:21 
GeneralImage Encoder / Decoder in GDI+ Pin
DidiKunz30-Mar-05 10:34
DidiKunz30-Mar-05 10:34 
Generalvoice capture on .Net Pin
h_alipour30-Mar-05 1:26
h_alipour30-Mar-05 1:26 
GeneralRe: voice capture on .Net Pin
Anonymous2-Apr-05 22:36
Anonymous2-Apr-05 22:36 
GeneralFeatures in .NET Framework 2.0 Pin
ischen_s129-Mar-05 21:42
ischen_s129-Mar-05 21:42 
GeneralRe: Features in .NET Framework 2.0 Pin
Colin Angus Mackay31-Mar-05 3:30
Colin Angus Mackay31-Mar-05 3:30 
General.NET framework and VS.NET Pin
Imtiaz Murtaza29-Mar-05 17:33
Imtiaz Murtaza29-Mar-05 17:33 
GeneralRe: .NET framework and VS.NET Pin
Sebastian Schneider29-Mar-05 21:53
Sebastian Schneider29-Mar-05 21:53 
GeneralRe: .NET framework and VS.NET Pin
Raja Sekhar Amirapu29-Mar-05 23:39
Raja Sekhar Amirapu29-Mar-05 23:39 
GeneralDraw markup using DirectX.AudioVideoPlayback.Video Pin
hyliu200529-Mar-05 13:07
hyliu200529-Mar-05 13:07 
General.NET Windows Services Pin
Member 183844329-Mar-05 11:12
Member 183844329-Mar-05 11:12 
GeneralRe: .NET Windows Services Pin
Sebastian Schneider29-Mar-05 21:47
Sebastian Schneider29-Mar-05 21:47 
GeneralRe: .NET Windows Services Pin
ischen_s129-Mar-05 21:55
ischen_s129-Mar-05 21:55 
Generalxsl xpath and the CF Pin
Anonymous27-Mar-05 13:20
Anonymous27-Mar-05 13:20 
GeneralConsuming .NET events in unmanaged code Pin
ischen_s127-Mar-05 5:03
ischen_s127-Mar-05 5:03 
GeneralSystem.AppDomain Namespace Pin
DHARMA.R27-Mar-05 3:03
DHARMA.R27-Mar-05 3:03 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.