Alex Rivera | Logout

How to obfuscate string constants?

Asked 2011-05-16T13:34:03.017
24

We have an application which contains sensitive information and I'm trying my best to secure it. The sensitive information includes:

  1. The main algorithm
  2. The keys for an encryption/decryption algorithm

I've been looking at Obfuscating the code but it doesn't seem to help much as I can still decompile it. However, my biggest concern is that the keys used for encryption of serial numbers etc are clearly visible when you decompile the code, even when it's Obfuscated.

Can anyone suggest how I can secure these strings?

I realise one of the methods might be to remove any decryption from the application itself, while this may be possible in part, there are some features which have to use encryption/decryption - mainly to save a config file and to pass an 'authorisation' token to a DLL to perform a calculation.

c# dll obfuscation
Edit
Report

2 Answers

1

i dont think you can easily obfuscate string constants, so if possible, dont use them :) you can use assembly resources instead, those you can encrypt however you want.

answered 2011-05-16T13:38:52.833
1

Depends what you're trying to do but can you use asymmetric encryption? That way you only need to store public keys with no need to obfuscate them.

answered 2011-05-16T13:46:48.887

Your Answer