473,396 Members | 1,738 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,396 software developers and data experts.

Secure LicenseProvider?

Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?

Thanks!
Dec 7 '07 #1
4 2455
On 7 dec, 16:37, Ludwig <lstuyc...@gmail.comwrote:
Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?

Thanks!
Question: is it possible to encrypt a string using a private key and
decrypt it using a public key??
Dec 7 '07 #2
RSA is asymmetric, e.g. it uses a private and a public key.
-- Peter
http://www.eggheadcafe.com
http://petesbloggerama.blogspot.com
http://www.blogmetafinder.com
"Ludwig" wrote:
On 7 dec, 16:37, Ludwig <lstuyc...@gmail.comwrote:
Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?

Thanks!

Question: is it possible to encrypt a string using a private key and
decrypt it using a public key??
Dec 7 '07 #3
On 7 dec, 20:52, Peter Bromberg [C# MVP]
<pbromb...@yahoo.NoSpamMaam.comwrote:
RSA is asymmetric, e.g. it uses a private and a public key.
-- Peterhttp://www.eggheadcafe.comhttp://petesbloggerama.blogspot.comhttp://www.blogmetafinder.com

"Ludwig" wrote:
On 7 dec, 16:37, Ludwig <lstuyc...@gmail.comwrote:
Hi,
I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.
However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.
Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?
Thanks!
Question: is it possible to encrypt a string using a private key and
decrypt it using a public key??- Tekst uit oorspronkelijk bericht niet weergeven -

- Tekst uit oorspronkelijk bericht weergeven -
Yes, but I mean encrypting with a private key and decrypting with a
public key.
Dec 8 '07 #4
"Ludwig" <ls*******@gmail.comwrote in message
news:2c**********************************@e4g2000h sg.googlegroups.com...
Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?
This might help:

http://www.codeproject.com/KB/security/xmldsiglic.aspx

Dec 8 '07 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

6
by: Billy Jacobs | last post by:
I have a website which has both secure and non-secure pages. I want to uses forms authentication. How do I accomplish this? Originally I had my web.config file in the root with Forms...
4
by: debedb | last post by:
Hi all, I have a link, <A onClick="javascript:foo()">. The foo() function does w = window.open('', fieldid+'mywindow', prop); w.document.open(); d = w.document; And proceeds to write...
1
by: Mohammad-Reza | last post by:
Hi When we set the LicenseProvider attribute to the class its automatically makes a Lic file. I want to know is there any way to change the content of this file? Thanks in advance.
0
by: Mike | last post by:
I have noticed that the id of my session object changes when I switch from a non-secure to a secure connection. What I'm trying to do: I have a cookie that is built on the non-secure side of...
7
by: Seth | last post by:
I have noticed that the id of my session object changes when I switch from a non-secure to a secure connection. What I'm trying to do: I have a cookie that is built on the non-secure side of...
5
by: Joe | last post by:
I have an application which runs in a non-secure environment. I also have an application that runs in a secure environment (both on the same machine). Is there any way to share the session data for...
40
by: Robert Seacord | last post by:
The CERT/CC has released a beta version of a secure integer library for the C Programming Language. The library is available for download from the CERT/CC Secure Coding Initiative web page at:...
7
by: Robert Seacord | last post by:
The CERT/CC has just deployed a new web site dedicated to developing secure coding standards for the C programming language, C++, and eventually other programming language. We have already...
0
by: amitvps | last post by:
Secure Socket Layer is very important and useful for any web application but it brings some problems too with itself. Handling navigation between secure and non-secure pages is one of the cumbersome...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing,...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.