Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

This is a very newbie IT security question...

I have to quickly implement a solution for our application that works like this... We have a binary executable that is given a configuration file. I need to encrypt the configuration file such that a non-trusted user can be given the binary and the encrypted config file (and maybe a public key or something) and he should be able to run the binary with the encrypted file.

Could you suggest a cryptography paradigm &/or c++ crypto library that will allow me to do the above? I was thinking of encrypting the config files with a static blowfish key which is hard-coded into the binary as an urgent fix which will raise the bar ever so slightly based on advice I got from the crypto stack exchange.

What would be a good design in the long run? I'm looking towards protecting from the following problems :-

  1. Casual reading of the xml configuration/input files
  2. Easy disassembling and reverse engineering of the binary / extraction of the secret key by searching through the text or data section
  3. some other attack vectors that you can think of just so that I know?

Note :- Question reposted from crypto stack exchange since this is probably a better place to ask it.

share|improve this question
2  
Imho any security where you hand out the key to the attacker is spoiled. The same goes for all DRM, there is no security to gain here. Only obscurity... depending on your "attacker", a simple caesar cipher (shift ascii to somewher not readable) might be enough. I personally would not consider "encryption" at all. –  dst Apr 30 at 22:04
    
Do you require this to work completely offline? –  Eric G May 1 at 2:05
    
This work to be offline? I'm not sure if I'm answering your question but the obfuscation/encryption can take place offline but the user needs to decrypt in the production environment –  owagh May 1 at 14:32

2 Answers 2

up vote 2 down vote accepted

If you store a key, password, etc. in the source code you will never be able to reasonably expect to keep it secret unless you also control the system. What you are describing would only be obscurity, obfuscation, or data hiding.

If you want only the program to be able to decrypt, its sounds like a case for using asymmetric cryptography. You may have a scenario where you encrypt the actual data using a symmetric key, but transfer the symmetric key using asymmetric to reduce overhead.

Depending upon your scenario, you could implement an Hardware Security Module (HSM). If you can setup and control the system, the HSM would be the trusted source to hold your secrets and protect the decryption process from the system and application. However, if you do not have physical control then the customer could possibly tamper with the HSM.

If the decryption keys are in the app or stored at the system, and the system is not under your control - the person who controls the system can always access them somehow, you can make it difficult, but not impossible. If you have complete control of the system, you can limit the user privileges to prevent them from loading tools or even reading the files to some degree. However, with a compiled desktop application being shipped to a customer, you will never be able to ensure they can't reverse or find the secrets.

share|improve this answer
    
This is exactly what my understanding is after reading up on the topic... Unfortunately we do have a compiled linux application being shipped to users to run on their systems for which we provide config files (which we want to protect) periodically. –  owagh May 1 at 14:40
1  
protect because there is a threat to privacy or protect for financial gain? Are you worried about config file sharing? Your root goal may be better accomplished in other, possibly non-technical ways. –  Eric G May 2 at 1:03

IMO, on desktop applications that use binary + xml configuration you can never be sure your xml is not being read, using a tool like Ollydbg its fairly easy to obtain any encryption key you might place in the binary. I would suggest if possible you look into deploying your application in a virtual environment like citrix, which if properly configured will give access tot he users only to the application and nothing else.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.