<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Article 3326 of comp.lang.perl:
Xref: feenix.metronet.com comp.lang.perl:3326 comp.unix.questions:6629
Newsgroups: comp.lang.perl,comp.unix.questions
Path: feenix.metronet.com!news.utdallas.edu!wupost!math.ohio-state.edu!news2.uunet.ca!uunet.ca!elegant!jmm
From: jmm@elegant.com (John Macdonald)
Subject: Re: Hiding a password?
Message-ID: &lt;1993Jun10.194627.15619@elegant.com&gt;
Date: Thu, 10 Jun 1993 19:46:27 GMT
References: &lt;2C13E44F.11978@news.service.uci.edu&gt; &lt;JSC.93Jun8044021@monolith.mit.edu&gt; &lt;rstone.739557635@cunews&gt;
Organization: Elegant Communications Inc.
Lines: 27

In article &lt;rstone.739557635@cunews&gt; rstone@superior.carleton.ca (Ron Stone) writes:
|In &lt;JSC.93Jun8044021@monolith.mit.edu&gt; jsc@monolith.mit.edu (Jin S Choi) writes:
|
|&gt;There are hooks in the source for using your algorithm of choice to
|&gt;decrypt encrypted scripts before they are run. Of course, people could
|&gt;still decompile the perl executable to figure out what it's doing, but
|&gt;it certainly makes it a lot harder.
|
|What! Does anyone have experience doing this? If so, I would like to
|hear about the procedure, &amp; how well it worked - particularly if you
|are using des-no-usa.

Yep.  We deliver a commercial package in encrypted form (in
fact, the skeleton code for the encryption came from me).

Look at the code in usersub.c.

You turn on basic encryption by compiling with -DCRYPTSCRIPT.

The encryption module provided in usersub.c is trivial - you
should write your own with the degree of security that you
need for your purposes.  Use the code in usersub.c as an
example of what the subroutine interface you have to provide
looks like, write your own interface routines, put them in
cryptlocal.h in the same directory as the rest of the Perl
source (or somewhere on the include search path), and then
compile with -DCRYPTLOCAL.


</pre></body></html>