Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 02-17-2014, 22:13
DaGoN DaGoN is offline
Friend
 
Join Date: Jan 2004
Posts: 45
Rept. Given: 15
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 25
Thanks Rcvd at 18 Times in 7 Posts
DaGoN Reputation: 6
Smile Request for a good protection scheme in Java

Hi to all ,
this is my scenario:
- assumptions: A .jar file with all classes signed.

Ok, i've choose the key file solution.
The key file is 'hashed' with sha-256 then the calculated hash is crypted by ECDSA algo.
My app test the genuine of key file in this way: remove crypted hash, recalculate sha-256 and then decrypt sha-256 hash and compare them.

The keygen is impossible... but remains the byte patching approach.

My request is... there is an efficent solution to avoid the byte patching?

All suggestions are accepted...

PHP Code:
key file template example:
---------
user=testuser
email
=test@test.it
hwId
=111-111-111
signature
=%%
------------

sha-256 ECDSA encrypt

user
=testuser
email
=test@test.it
hwId
=111-111-111
signature
=%[(sha-256 <= ECDSA encrypt)]%

My apps remove signature and recalculate sha-256 hash

---------
user=testuser
email
=test@test.it
hwId
=111-111-111
signature
=%%
------------

if(new 
sha-256 ==  ECDSA decrypted (sha-256))
   print 
"good"
else
   print 
"bad" 
Thanks in adv,
DaGoN
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Adobe protection scheme Dark Intentions General Discussion 0 07-09-2015 03:35
Obsidium protection scheme as a target! Mr.reCoder General Discussion 26 07-08-2015 02:23


All times are GMT +8. The time now is 09:01.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )