Secure LicenseProvider?

[Ludwig]

Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?

Thanks!

 

[Ludwig]

Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?

Thanks!

Question: is it possible to encrypt a string using a private key and
decrypt it using a public key??

 

[Peter Bromberg [C# MVP]]

RSA is asymmetric, e.g. it uses a private and a public key.
-- Peter
http://www.eggheadcafe.com
http://petesbloggerama.blogspot.com
http://www.blogmetafinder.com

 

[Ludwig]

RSA is asymmetric, e.g. it uses a private and a public key.
-- Peterhttp://www.eggheadcafe.comhttp://petesbloggerama.blogspot.comhttp://www.blogmetafinder.com






- Tekst uit oorspronkelijk bericht weergeven -

Yes, but I mean encrypting with a private key and decrypting with a
public key.

 

[John Vottero]

Hi,

I have successfully tried to use my own LicenseProvider; and have
implemented licensing for a class: if the licensefile for a class
exists and a certain Guid is in it, then de class gets a Licence and
can be used by the host app.

However, it's not very secure - the Guid can be viewed by reflection
or by decompiling. Even if I encrypt it, the key can be reverse-
engineered.

Is there a secure way I can implement a LicenceProvider, or is
obfuscation the only way to somewhat protect the assembly?

This might help:

http://www.codeproject.com/KB/security/xmldsiglic.aspx