Skip to content

Integrity protection #15

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Integrity protection #15

wants to merge 5 commits into from

Conversation

rexyrexy
Copy link

No description provided.

@rexyrexy
Copy link
Author

rexyrexy commented Aug 21, 2018

@developer-variety Thanks, will glad to see your fork :D

file.BaseStream.Position = file.BaseStream.Length - 32;
string b = Encoding.ASCII.GetString(file.ReadBytes(32));

if (a != b)
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I still haven't pushed this PR because there is a huge security flaw here : what prevents me from decompiling the protected file and NOP this if statement ? @rexyrexy


internal static string Hash(byte[] metin)
{
MD5CryptoServiceProvider md5 = new MD5CryptoServiceProvider();

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

MD5 is extremely obsolete, even something as old as SHA-1 is faster and more secure.

@NotoriousRebel
Copy link

Any updates on this?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants