Re: ex encrypted script

]
>
>| Is there a way to encrypt a script yet still allow it to be runnable?  I
>| know that the simple answer is to write it in C and compile it but I don't
>| have the means of doing that at the moment.  (i.e. there is not compiler on
>| the system)
>| 
>| I thought of a few simple protections but they all involve decrypting before
>| running.
>
>	Ever hear of chmod?  chown?
>Adam

The vendor also has superuser access..  chmod chown won't protect it.. :(


( Computer Consulting & Management   )
(P.O. Box 421  Cambria, IL 62915-0421)

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.2
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=SgPT
-----END PGP PUBLIC KEY BLOCK-----

> >| Is there a way to encrypt a script yet still allow it to be runnable?  I
> >| know that the simple answer is to write it in C and compile it but I don't
> >| have the means of doing that at the moment.  (i.e. there is not compiler on
> >| the system)
> >| 
> >| I thought of a few simple protections but they all involve decrypting before
> >| running.
> >
> >	Ever hear of chmod?  chown?
> >Adam
> 
> The vendor also has superuser access..  chmod chown won't protect it.. :(

I once had to obfuscate an awk script.  "Cryptography is Economics."  My
job was to make it difficult for the enemy to steal the source.  There
was a license agreement...

The simple answer of "no" is right in the strong sense, but there are
tricks to make life difficult for the amateur attacker.

My approach was a self-decrypting program.  The "real" script was
encrypted within the body of the encasing script.  For increased
obfuscation, decrypt only small pieces at a time.

> > >| Is there a way to encrypt a script yet still allow it to be runnable?  I
> > >| know that the simple answer is to write it in C and compile it but I don't
> > >| have the means of doing that at the moment.  (i.e. there is not compiler on
> > >| the system)
> > >| 
> > >| I thought of a few simple protections but they all involve decrypting before
> > >| running.
> 
> I once had to obfuscate an awk script.  "Cryptography is Economics."  My
> job was to make it difficult for the enemy to steal the source.  There
> was a license agreement...
> 
> The simple answer of "no" is right in the strong sense, but there are
> tricks to make life difficult for the amateur attacker.
> 
> My approach was a self-decrypting program.  The "real" script was
> encrypted within the body of the encasing script.  For increased
> obfuscation, decrypt only small pieces at a time.

There is another technique by which the source is obscured by an
automatic rewrite mechanism.  This provides for both obscuration of the
source and the ability to determine who originated illicit copies.  I
believe it was first implemented by Gimbel Software as part of their
C-terp system (unpublished).  A paper on techniques for doing this has
also been published:

	"Operating System Protection Through Program Evolution"
	Computers and Security - 1992? 3? (F. Cohen)

-> See: Info-Sec Heaven at URL http://all.net/
Management Analytics - 216-686-0090 - PO Box 1480, Hudson, OH 44236