dev-cpp-users Mailing List for Dev-C++

Hello all,

I need help on an algorithm. I need to accept username/password =
combinations
on the client side of a client-server app, store those on the client =
side,
and "decrypt" them again without user input, using only the stored =
strings.
Think the "remember my password" function in MS Outlook, IE, etc.

Ideally, I would like to do this:
On first run:
1) Accept email address
2) Accept username & password pairs
3) "Encrypt" username/password pairs with email address + some
machine-dependent data as a key
4) Write these encrypted pairs and the email address to a text file

On future runs:
1) Read the encrypted pairs
2) "Decrypt" them
3) Do stuff.

The best idea I have now is some block-and-bit chunking and shifting - =
break
the string to encrypt into variable-length chunks, shuffle, reassemble, =
bit
rotate, repeat. The "decrypt" would simply reverse the process. My =
concern
is that anybody who knows the algorithm will be able to reverse it quite
easily, given access to the text file.

Any help is appreciated!

-Ed

----- Original Message -----=20
From: "David McKen" <ci...@ya...>
To: "Dev-C Mailing List" <dev...@li...>
Sent: Sunday, January 11, 2004 3:33 AM
Subject: Re: [Dev-C++] News from devpaks repository


 > From reading the docs on TAO it seems that TAO is to inertwined with
> ACE to build separately. Maybe a ACE only build and a ACE+TAO build?
At least with bcc55 ACE can build separately and TAO+ACE together.

>=20
> To keep things small for the users I was only going to put the
> $ACE_ROOT/ace directory as all the include files are in that
> directory as well as all the libraries. I am considering also
> including the exaples directory to get users off and running.
How about ACEXML?  Thats a separated package. =20
( I have been made plans to copy just libs out of $(ACE_ROOT)/ace and
$(ACE_ROOT)/TAO directories. There is ace-install script that can do it, =

I have to modified it so that its possible to copy only ace/tao libs and =

dropout man/include/source files. )

>=20
> If you want the tests/apps/services/etc. you probably are better off
> downloading and building it yourself. You could probably build the
> test using the library from the dev-pak. Question is what do I
> include what do I not include?
Thats OK.=20
 How about ACE+ACEXML, libraries in Dev-Cpp/lib and other files in =
Dev-Cpp/ACE_wrappers/ace?
And perhaps some Dev-Cpp Templates modified from tests?=20

 -Mp
:

Hey Jean!!
About 2 || 3 months ago someone asked the very same question, I had the 
information handy and replied with it. Unfortunately, that information 
is no longer at hand, but if you need it right away, you can always 
google it.

Have good on. BTW, what were you chosen for [elegido] :-)

jua...@ya... wrote:

> hello,
> i want to know how can i configure devc++ to use it with cygwin. the 
> idea is that i want to replace mingw with cygwin, due to a special 
> source code that compiles with cygwin only. if you know of some howto, 
> docs, or the like, please notify me.
>  
> thx in advance
>  
> juan
>
>
> ------------------------------------------------------------------------
> <http://ar.rd.yahoo.com/mail/welcome/*http://ar.autos.yahoo.com> 
> ¿Buscás un auto?
> Encontralo en Yahoo! Autos 
> <http://ar.rd.yahoo.com/mail/welcome/*http://ar.autos.yahoo.com>
> ¡Más de 4000 clasificados todos los días!
> Usados 
> <http://ar.rd.yahoo.com/mail/welcome/*http://yahoo.deautos.com/usados> 
> - 0 km 
> <http://ar.rd.yahoo.com/mail/welcome/*http://yahoo.deautos.com/ofertas> 
> - Vendé el tuyo 
> <http://ar.rd.yahoo.com/mail/welcome/*http://ar.autos.yahoo.com/vender/> 


-- 

FYI
http://www.astro.umd.edu/~marshall/abbrev.html

E-Mail Policy
http://www.vif.com/users/escalante/Email_Policy.html

* You cannot exercise your power to a point of humiliation.
                               - Jean Chretien

* The media's the most powerful entity on earth. They have the 
  power to make the innocent guilty and to make the guilty 
  innocent, and that's power. 
                                - Malcom X
* "Innocent until proven guilty", no... not in Canada!!

hello,
i want to know how can i configure devc++ to use it with cygwin. the idea is that i want to replace mingw with cygwin, due to a special source code that compiles with cygwin only. if you know of some howto, docs, or the like, please notify me.
 
thx in advance
 
juan



---------------------------------
 ¿Buscás un auto?
Encontralo en Yahoo! Autos
¡Más de 4000 clasificados todos los días!
Usados - 0 km - Vendé el tuyo

If the program will only export a single algorithm() function, there are
no need to bother with changing names of all internal variables and
functions. It is - as I said in an earlier mail - enought to declare them
static. These symbols will then be hidden from the linker - no symbol
names to be found in the object - or library - file. It is enough to make
sure the object file is built without debugging information and that it is
stripped.

Anyway - are you sure that your algorithm are really so revolutionary that
you need to take the time to protect it? There are really a huge set of
available algorithms for performing routing, flow optimizations etc. The
biggest trick is to decide which algorithm to use. Then a large set of
these algorithms are available with free source code.

What I'm trying to say is that in most cases, it costs more to try and
protect code than what is to be gained. Unless really drastic measures are
taken, a competent hacker will most probably walk through your algorithm
in a very limited time. The question is: does he/she have a reason to?

/Per W

On Sun, 11 Jan 2004, OROSZI Bal=E1zs wrote:

> Jean-Marc Godart wrote:
> > I thank you all for your advice/comments.
> >
> > You are right about my intents, Haakon. I am marketing a kinda complex
> > "mathematical" algorithm for planning trips/tours. Since this algorithm=
 has
> > to be interfaced by customers, once compiled, I want the source code of=
 the
> > algorithm to be "hidden" (as far as the customers don't try to do
> > decompilation or reverse engineering). I definitely do not want custome=
rs to
> > see what the algorithm does but also not the names of "private"
> > functions/variables, except for the main function (called "algorithm()"=
) and
> > its parameters, of course.
> >
> > Any additional advice/reference on this topic ? Also, if you have
> > ideas/references about how I can make decompilation and reverse enginee=
ring
> > more difficult, I would be very pleased to know them.
>
> Well, this is theoretically impossible. Nearly everything can be
> cracked/reverse engineered nowadays.
>
> However, you may try writing a small program that scans all of your
> source code, and then renames everything inside: variable, function
> names, except what you specify not to rename. Then you compile that.
> That way, you won't get lost in your sources, as you develop the
> "readable" version, but compile the "renamed" one.
> That may help some, though you will have to write a new program, the
> code parser/renamer.
>
> --
> Greetings,
>    Bal=E1zs
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> Dev-cpp-users mailing list
> Dev...@li...
> TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
> https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
>

Jean-Marc Godart wrote:
> I thank you all for your advice/comments.
> 
> You are right about my intents, Haakon. I am marketing a kinda complex
> "mathematical" algorithm for planning trips/tours. Since this algorithm has
> to be interfaced by customers, once compiled, I want the source code of the
> algorithm to be "hidden" (as far as the customers don't try to do
> decompilation or reverse engineering). I definitely do not want customers to
> see what the algorithm does but also not the names of "private"
> functions/variables, except for the main function (called "algorithm()") and
> its parameters, of course.
> 
> Any additional advice/reference on this topic ? Also, if you have
> ideas/references about how I can make decompilation and reverse engineering
> more difficult, I would be very pleased to know them.

Well, this is theoretically impossible. Nearly everything can be 
cracked/reverse engineered nowadays.

However, you may try writing a small program that scans all of your 
source code, and then renames everything inside: variable, function 
names, except what you specify not to rename. Then you compile that. 
That way, you won't get lost in your sources, as you develop the 
"readable" version, but compile the "renamed" one.
That may help some, though you will have to write a new program, the 
code parser/renamer.

--
Greetings,
   Balázs

I thank you all for your advice/comments.

You are right about my intents, Haakon. I am marketing a kinda complex
"mathematical" algorithm for planning trips/tours. Since this algorithm has
to be interfaced by customers, once compiled, I want the source code of the
algorithm to be "hidden" (as far as the customers don't try to do
decompilation or reverse engineering). I definitely do not want customers to
see what the algorithm does but also not the names of "private"
functions/variables, except for the main function (called "algorithm()") and
its parameters, of course.

Any additional advice/reference on this topic ? Also, if you have
ideas/references about how I can make decompilation and reverse engineering
more difficult, I would be very pleased to know them.

Again and by advance, thank you.

Best regards,

            Jean-Marc

----- Original Message -----
From: "Haakon M. Eriksen" <ha...@nh...>
To: "Per Westermark" <pw...@ia...>; "Jean-Marc Godart"
<go...@sk...>
Cc: <dev...@li...>; "Ferdinando Formica"
<s2...@st...>
Sent: Sunday, January 11, 2004 1:50 PM
Subject: RE: [Dev-C++] Split code in public/private parts - Help please


> I think Jean-Marc is asking about something else - code obfuscation.
> There are several references about wanting to hide what the source code
> does. Why do you want this, Jean-Marc?
>
>
> Yours sincerely,
>
>
>
> Haakon Meland Eriksen
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> Dev-cpp-users mailing list
> Dev...@li...
> TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
> https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
>
>
>

I think Jean-Marc is asking about something else - code obfuscation.
There are several references about wanting to hide what the source code
does. Why do you want this, Jean-Marc?


Yours sincerely,



Haakon Meland Eriksen

A library is a collection of multiple object files. There are a lot of
good references out there.

If any other object file must call your functions, you might do

/* private_include_file.h */
#define eval_area	get_lost_1
#define solve_root	get_lost_2
...

and then your code will be
#include "private_include_file.h"

void my_callable_function(void) {
    ...
    if (eval_area(1,2,3) > 0) {
        solve_root(4,5,6);
    }
}

If your variables and functions doesn't need to be accessed from the
outside, it is enough to declare them static, i.e.:

/* my_private_file.c */
static int private_variable_1;
static float private_variable_2;
char public_version[] = "My callable module version 1.02.01";

static int eval_area(int a,int b,int c) {
    ....
    return a+b+c;
}

void my_callable_function(void) {
    ...
    if (eval-area(1,2,3) > 0) {
        solve_root(4,5,6);
    }
}

/Per W

On Sun, 11 Jan 2004, Jean-Marc Godart wrote:

> Thanks a lot for your very adequate answer, Ferdinando.
>
> I have two extra questions, based on your answer ... Sorry it is a little
> off-topic now since it is more like a general C question.
>
> (1) What is the difference between a ".o" file and a ".lib" file (library)
> and how can I convert one in the other ?
>
> (2) I understand it is not possible to prevent someone from calling all of
> the functions in the ".o" file. Yet, I just noticed the names of all my
> variables and functions appear "in clear" in the code of the ".o" file (when
> opening it with a text processor). Is there a way to avoid this (as the
> names are explicit and give hints about the way the program works) ? Of
> course, I can just give names as "a", "b", "c"... but then I get lost in my
> source code. I tried to use "static" but it does not change a thing ...
>
> Any help is welcome !
>
> Thanks again,
>
>         Jean-Marc
>
> ----- Original Message -----
> From: "Ferdinando Formica" <s2...@st...>
> To: <go...@sk...>
> Cc: "Dev-C++ Mailing List" <dev...@li...>
> Sent: Saturday, January 10, 2004 7:51 PM
> Subject: Re: [Dev-C++] Split code in public/private parts - Help please
>
>
> >
> > > How can I compile "part two" (which has no "main" function),
> > > so that the source code cannot be seen anymore ?
> >
> > You can put "part two" in a separate file, and compile it singularly, then
> > distribute the output file (with .o extension).
> >
> > > Then, how can I compile "part one" source code (which has
> > > the "main" function) with "part two" compiled version?
> >
> > You have to include in your project the .o file selecting "include in
> > link" and deselecting "include in compilation", or equivalently build a
> > library from it (a .a file), call it e.g. libp2.a, and specify "-lp2" in
> > linker options.
> >
> > > How can I make sure it is not possible
> > > to call directly another function of "part two" ?
> >
> > _Really_ you can't, but only who knows the implementation (or is a good
> > and patient reverse engineer) know what's inside an object file. You
> > should put declarations for all functions you would like a programmer to
> > call in a header (.h) and distribute it with your .o or .a file.
> >
> > Bye, Ferdinando.
> >
> >
> >
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> Dev-cpp-users mailing list
> Dev...@li...
> TO UNSUBSCRIBE: http://www23.brinkster.com/noicys/devcpp/ub.htm
> https://lists.sourceforge.net/lists/listinfo/dev-cpp-users
>

Thanks a lot for your very adequate answer, Ferdinando.

I have two extra questions, based on your answer ... Sorry it is a little
off-topic now since it is more like a general C question.

(1) What is the difference between a ".o" file and a ".lib" file (library)
and how can I convert one in the other ?

(2) I understand it is not possible to prevent someone from calling all of
the functions in the ".o" file. Yet, I just noticed the names of all my
variables and functions appear "in clear" in the code of the ".o" file (when
opening it with a text processor). Is there a way to avoid this (as the
names are explicit and give hints about the way the program works) ? Of
course, I can just give names as "a", "b", "c"... but then I get lost in my
source code. I tried to use "static" but it does not change a thing ...

Any help is welcome !

Thanks again,

        Jean-Marc

----- Original Message -----
From: "Ferdinando Formica" <s2...@st...>
To: <go...@sk...>
Cc: "Dev-C++ Mailing List" <dev...@li...>
Sent: Saturday, January 10, 2004 7:51 PM
Subject: Re: [Dev-C++] Split code in public/private parts - Help please


>
> > How can I compile "part two" (which has no "main" function),
> > so that the source code cannot be seen anymore ?
>
> You can put "part two" in a separate file, and compile it singularly, then
> distribute the output file (with .o extension).
>
> > Then, how can I compile "part one" source code (which has
> > the "main" function) with "part two" compiled version?
>
> You have to include in your project the .o file selecting "include in
> link" and deselecting "include in compilation", or equivalently build a
> library from it (a .a file), call it e.g. libp2.a, and specify "-lp2" in
> linker options.
>
> > How can I make sure it is not possible
> > to call directly another function of "part two" ?
>
> _Really_ you can't, but only who knows the implementation (or is a good
> and patient reverse engineer) know what's inside an object file. You
> should put declarations for all functions you would like a programmer to
> call in a header (.h) and distribute it with your .o or .a file.
>
> Bye, Ferdinando.
>
>
>

From reading the docs on TAO it seems that TAO is to inertwined with
ACE to build separately. Maybe a ACE only build and a ACE+TAO build?

To keep things small for the users I was only going to put the
$ACE_ROOT/ace directory as all the include files are in that
directory as well as all the libraries. I am considering also
including the exaples directory to get users off and running.

If you want the tests/apps/services/etc. you probably are better off
downloading and building it yourself. You could probably build the
test using the library from the dev-pak. Question is what do I
include what do I not include?


--- Markku Puro <mar...@ko...> wrote:
> ----- Original Message ----- 
> From: "David McKen" <ci...@ya...>
> To: "Dev-C Mailing List" <dev...@li...>
> Sent: Saturday, January 10, 2004 8:26 AM
> Subject: Re: [Dev-C++] News from devpaks repository
> 
> 
> > Was planning to do both dll+static but I woudn't mind going one
> way,
> > I use static myself. 
> > 
> > Do you want TAO? If I was going to do that it was going to be
> > separate. ACE by itself is kinda big and from what I hear (I
> don't
> > use TAO) it is even bigger.
> 
> Iam not sure, but if its possible to do separate thats good.
> TAO its much bigger. With bcc55 all ACE-libs are about 6Mbytes,
> TAO and most of services(Naming/Trading/LifeCycle etc) are about
> 70Mbytes.
> Minimum CORBA configuration should be much smaller.
> 
> > 
> > How do you comple ACE with Dev-C++? I just use the msys on top of
> > mingw combination. Works fine for me, Win2k as well.
> 
> I used Dev-C++ 'Import MS Visual C++ project' to generate basic
> project file.
> It is normal .dev project and when Dev-C++ trys to make that
> library
> command file lenght expands too big (<5000bytes?)
> (ok, its possible to shorten filepaths etc. but that limit value
> still exists ;)
> MSYS and MinGW works fine for me too.
> 
>   -Mp
> 
> > 
> > --- Markku Puro <mar...@ko...> wrote:
> > > 
> > > ----- Original Message ----- 
> > > From: "David McKen" <ci...@ya...>
> > > To: "Dev-C Mailing List" <dev...@li...>
> > > Sent: Friday, January 09, 2004 6:49 AM
> > > Subject: Re: [Dev-C++] News from devpaks repository
> > > 
> > > 
> > > > Would anyone be interested in a dev-pak of the ACE Frameworks
> > > > library?
> > > 
> > > With DLL libs? 
> > > Does it include TAO (CORBA Middleware)?
> > > 
> > > DoYou use Dev-Cpp or msys/MinGW?
> > > With Dev-Cpp I run into "command line too long" error in ACE
> > > library linking phase.
> > > I suppose that its a Windows (Win2000) problem but does anybody
> > > know if there is any way to avoid that?
> > > 
> > >   -Mp
> > > 
> > > > 
> > > > I use it currently and wouldn't mind maintaing a dev-pak for
> it.
> > > The
> > > > problem is it is quite big. Check out
> > > > http://www.cs.wustl.edu/~schmidt/ACE.html to see what ACE is.

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus