This is a very newbie IT security question...
I have to quickly implement a solution for our application that works like this... We have a binary executable that is given a configuration file. I need to encrypt the configuration file such that a non-trusted user can be given the binary and the encrypted config file (and maybe a public key or something) and he should be able to run the binary with the encrypted file.
Could you suggest a cryptography paradigm &/or c++ crypto library that will allow me to do the above? I was thinking of encrypting the config files with a static blowfish key which is hard-coded into the binary as an urgent fix which will raise the bar ever so slightly based on advice I got from the crypto stack exchange.
What would be a good design in the long run? I'm looking towards protecting from the following problems :-
- Casual reading of the xml configuration/input files
- Easy disassembling and reverse engineering of the binary / extraction of the secret key by searching through the text or data section
- some other attack vectors that you can think of just so that I know?
Note :- Question reposted from crypto stack exchange since this is probably a better place to ask it.